NEW 2023 Certification Sample Questions NSE6_FWB-6.4 Dumps & Practice Exam [Q11-Q35]

Q11. What other consideration must you take into account when configuring Defacement protection

Q12. What capability can FortiWeb add to your Web App that your Web App may or may not already have?

Q13. You are configuring FortiAnalyzer to store logs from FortiWeb.
Which is true?

Q14. FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Q15. How does offloading compression to FortiWeb benefit your network?

Q16. Which algorithm is used to build mathematical models for bot detection?

Q17. The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

Q18. What key factor must be considered when setting brute force rate limiting and blocking?

Q19. In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

Q20. When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate’s Real Server configuration point at?

Q21. Refer to the exhibits.


FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

Q22. In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

Q23. Refer to the exhibit.

Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.
What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

Q24. Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)

Q25. A client is trying to start a session from a page that would normally be accessible only after the client has logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Q26. What role does FortiWeb play in ensuring PCI DSS compliance?

Q27. Under which circumstances does FortiWeb use its own certificates? (Choose Two)

Q28. Which of the following is true about Local User Accounts?

Q29. Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)

Q30. What must you do with your FortiWeb logs to ensure PCI DSS compliance?

Q31. In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)

Q32. When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?