Online Access Free NSE6_FWB-6.0 Exam Questions

How does an ADOM differ from a VDOM?

• A.ADOMs do not have virtual networking
• B.Allows you to have 1 administrator for multiple tenants
• C.ADOMs only affect specific functions, and do not provide full separation like VDOMs do.
• D.ADOMs improve performance by offloading some functions.

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 privatenetwork LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?

• A.Configure a server policy that matches requests from shared Internet connections.
• B.Configure FortiWeb to use "X-Forwarded-For:" headers to find each client's private network IP, and to block attacks using that.
• C.Enable SYN cookies.
• D.Enable "Shared IP" and configure the separate rate limits for requests from NATted source IPs.

What is one of the key benefits of the FortiGuard IP Reputation feature?

• A.It maintains a list of private IP addresses
• B.It is updated once per year
• C.FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
• D.Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists

Which is true about HTTPS on FortiWeb? (Choose three.)

• A.In true transparent mode, the TLS session terminator is a protected web server.
• B.In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
• C.Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
• D.For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
• E.After enabling HSTS, redirects to HTTPS are no longer necessary.