Free Fortinet NSE6_FWB-6.4 Exam Actual Questions

The questions for NSE6_FWB-6.4 were last updated On May 6, 2024

Question No. 1

Which two statements about running a vulnerability scan are true? (Choose two.)

Show Answer Hide Answer
Correct Answer: A, B

Should the Vulnerability Scanner allow it, SVMS will set the scan schedule (or schedules) to run in a maintenance window. SVMS will advise Client of the scanner's ability to complete the scan(s) within the maintenance window.

Vulnerabilities on live web sites. Instead, duplicate the web site and its database in a test environment.


https://help.fortinet.com/fweb/552/Content/FortiWeb/fortiweb-admin/vulnerability_scans.htm

Question No. 2

FortiWeb offers the same load balancing algorithms as FortiGate.

Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Show Answer Hide Answer
Question No. 3

Which would be a reason to implement HTTP rewriting?

Show Answer Hide Answer
Correct Answer: B

Create a new URL rewriting rule.


Question No. 4

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.

What must the administrator do to avoid this problem? (Choose two.)

Show Answer Hide Answer
Correct Answer: A, C

Configure your load balancer to insert or append to anX-Forwarded-For:,X-Real-IP:, or other HTTP X-header. Also configureFortiWebto find the original attacker's or client's IP address in that HTTP header


Question No. 5

Which statement about local user accounts is true?

Show Answer Hide Answer
Correct Answer: B