Fortinet NSE6_FWB-6.4 Quiz 1 Topic 4 Questions 1-5

Question: 1

What other consideration must you take into account when configuring Defacement protection

AUse FortiWeb to block SQL Injections and keep regular backups of the Database

BAlso incorporate a FortiADC into your network

CNone. FortiWeb completely secures the site against defacement attacks

DConfigure the FortiGate to perform Anti-Defacement as well

Show Answer

Question: 2

Refer to the exhibit.

q2_NSE6_FWB-6.4

There is only one administrator account configured on FortiWeb. What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?

ADelete the built-in administrator user and create a new one.

BConfigure IPv4 Trusted Host # 3 with a specific IP address.

CThe configuration changes must be made on the upstream device.

DChange the Access Profile to Read_Only.

Show Answer

Question: 3

You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.

Which statement about this solution is true?

AThe server policy applies the same protection profile to all of its protected web applications.

BYou must put the single web server in to a server pool, in order to use it with HTTP content routing.

CYou must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.

DStatic or policy-based routes are not required.

Show Answer

Question: 4

When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

ARestart the FortiWeb to clear the caches

BDrill down in the report to correct any false positives.

CActivate the report to create t profile

DTake the FortiWeb offline to apply the profile

Show Answer

Question: 5

Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

ASensitive info masking

BPoison Cookie detection

CSession Management

DBrute Force blocking

Show Answer

Fortinet NSE6_FWB-6.4 Quiz:1 Topic:4 Questions:1-5