NSE6_FWB-6.4試験無料問題集（58題）「Fortinet NSE 6

出題：1

When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

A. If you are an enterprise whose employees use only mobile devices

B. If you are an enterprise whose computers all trust your active directory or other CA server

C. If you are an enterprise whose resources do not need security

D. If you are a small business or home office

正解：B 解答を投票する

出題：2

Under which circumstances does FortiWeb use its own certificates? (Choose Two)

A. HTTPS to FortiGate

B. Secondary HTTPS connection to server where FortiWeb acts as a client

C. HTTPS access to GUI

D. HTTPS to clients

正解：B,C 解答を投票する

出題：3

Which three statements about HTTPS on FortiWeb are true? (Choose three.)

A. After enabling HSTS, redirects to HTTPS are no longer necessary.

B. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

C. In true transparent mode, the TLS session terminator is a protected web server.

D. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

正解：C,D,E 解答を投票する

出題：4

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

A. Enable the Add X-Forwarded-For setting on FortiWeb.

B. No Special configuration is required; connectivity will be re-established after the set timeout.

C. Place FortiWeb in front of FortiADC.

D. Enable the Use X-Forwarded-For setting on FortiWeb.

正解：C,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

A. Take the FortiWeb offline to apply the profile

B. Drill down in the report to correct any false positives.

C. Activate the report to create t profile

D. Restart the FortiWeb to clear the caches

正解：B 解答を投票する

出題：6

In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

A. non-Matching traffic is held in buffer

B. Non-matching traffic is Denied

C. Non-matching traffic is rerouted to FortiGate

D. Non-matching traffic is allowed

正解：B 解答を投票する

NSE6_FWB-6.4試験無料問題集「Fortinet NSE 6 - FortiWeb 6.4 認定」