If you're considering taking the Fortinet NSE 6 - FortiWeb 6.4 exam, you'll want to make sure you understand every question and answer completely. The questions on this exam can be a bit challenging, so you'll need a good guide to help you through them. You can find a guide to this exam online or in a printed book. Both of these options are inexpensive and can give you the necessary knowledge to pass the exam.
Question: 1
Which two statements about running a vulnerability scan are true? (Choose two.)
A. You should run the vulnerability scan during a maintenance window.
B. You should run the vulnerability scan in a test environment.
C. Vulnerability scanning increases the load on FortiWeb, so it should be avoided.
D. You should run the vulnerability scan on a live website to get accurate results.
Explanation:
Answer: A, B
Should the Vulnerability Scanner allow it, SVMS will set the scan schedule (or schedules) to run in a maintenance window. SVMS will advise Client of the scanner’s ability to complete the scan(s) within the maintenance window.
Vulnerabilities on live web sites. Instead, duplicate the web site and its database in a test environment. Reference: https://www.trustwave.com/media/17427/trustwave_mss_managed-3rd-party-vulnerability- scanning.pdf
https://help.fortinet.com/fweb/552/Content/FortiWeb/fortiweb-admin/vulnerability_scans.htm
Question: 2
When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?
A. Restart the FortiWeb to clear the caches
B. Drill down in the report to correct any false positives.
C. Activate the report to create t profile
D. Take the FortiWeb offline to apply the profile
Answer : B
Question: 3
Which would be a reason to implement HTTP rewriting?
A. The original page has moved to a new URL
B. To replace a vulnerable function in the requested URL
C. To send the request to secure channel
D. The original page has moved to a new IP address
Explanation:
Answer: B
Create a new URL rewriting rule.
Reference: https://docs.fortinet.com/document/fortiweb/6.3.0/administration-guide/961303/rewriting- redirecting
Question: 4
Refer to the exhibit.
FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)
A. Enable the Use X-Forwarded-For setting on FortiWeb.
B. No Special configuration is required; connectivity will be re-established after the set timeout.
C. Place FortiWeb in front of FortiADC.
D. Enable the Add X-Forwarded-For setting on FortiWeb.
Explanation:
Answer: A, C
Configure your load balancer to insert or append to an X-Forwarded-For:, X-Real-IP:, or other HTTP X- header. Also configure FortiWeb to find the original attacker’s or client’s IP address in that HTTP header Reference: https://help.fortinet.com/fweb/560/Content/FortiWeb/fortiweb- admin/planning_topology.htm
Question: 5
Which statement about local user accounts is true?
A. They are best suited for large environments with many users.
B. They cannot be used for site publishing.
C. They must be assigned, regardless of any other authentication.
D. They can be used for SSO.
Answer: B
Next Page