Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
 

Fortinet NSE6_FWB-6.1 Exam Actual Questions

The questions for NSE6_FWB-6.1 were last updated on July 22, 2024.
  • Viewing page 1 out of 8 pages.
  • Viewing questions 1-4 out of 30 questions

Topic 1 - Single Topic

Question #1 Topic 1

Which two statements about running a vulnerability scan are true? (Choose two.)

  • A. You should run the vulnerability scan during a maintenance window.
  • B. You should run the vulnerability scan in a test environment.
  • C. Vulnerability scanning increases the load on FortiWeb, so it should be avoided.
  • D. You should run the vulnerability scan on a live website to get accurate results.
Reveal Solution Hide Solution   Discussion   1

Correct Answer: AB 🗳️
Should the Vulnerability Scanner allow it, SVMS will set the scan schedule (or schedules) to run in a maintenance window. SVMS will advise Client of the scanner's ability to complete the scan(s) within the maintenance window.
Vulnerabilities on live web sites. Instead, duplicate the web site and its database in a test environment.
Reference:
https://www.trustwave.com/media/17427/trustwave_mss_managed-3rd-party-vulnerability-scanning.pdf https://help.fortinet.com/fweb/552/Content/FortiWeb/fortiweb-admin/vulnerability_scans.htm

Question #2 Topic 1

FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

  • A. Round robin
  • B. HTTP session-based round robin
  • C. HTTP user-based round robin
  • D. HTTP content routes
Reveal Solution Hide Solution   Discussion   4

Correct Answer: AD 🗳️
Reference:
https://docs.fortinet.com/document/fortiweb/6.3.0/administration-guide/399384/defining-your-web-servers http://fortinet.globalgate.com.ar/pdfs/FortiWeb/FortiWeb_DS.pdf

Question #3 Topic 1

Which would be a reason to implement HTTP rewriting?

  • A. The original page has moved to a new URL
  • B. To replace a vulnerable function in the requested URL
  • C. To send the request to secure channel
  • D. The original page has moved to a new IP address
Reveal Solution Hide Solution   Discussion   5

Correct Answer: A 🗳️
Create a new URL rewriting rule.
Reference:
https://docs.fortinet.com/document/fortiweb/6.3.0/administration-guide/961303/rewriting-redirecting

Question #4 Topic 1

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

  • A. Enable the Use X-Forwarded-For setting on FortiWeb.
  • B. No Special configuration is required; connectivity will be re-established after the set timeout.
  • C. Place FortiWeb in front of FortiADC.
  • D. Enable the Add X-Forwarded-For setting on FortiWeb.
Reveal Solution Hide Solution   Discussion   6

Correct Answer: AD 🗳️
Configure your load balancer to insert or append to an X-Forwarded-For:, X-Real-IP:, or other HTTP X-header. Also configure FortiWeb to find the original attacker's or client's IP address in that HTTP header
Reference:
https://help.fortinet.com/fweb/560/Content/FortiWeb/fortiweb-admin/planning_topology.htm

Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
ex Want to SAVE BIG on Certification Exam Prep?
close
ex Unlock All Exams with ExamTopics Pro 75% Off
  • arrow Choose From 1000+ Exams
  • arrow Access to 10 Exams per Month
  • arrow PDF Format Available
  • arrow Inline Discussions
  • arrow No Captcha/Robot Checks
Limited Time Offer
Ends in