Download Fortinet.NSE6_FWB-5.6.0.ActualTests.2018-11-09.16q.tqb
| Vendor: | Fortinet |
| Exam Code: | NSE6_FWB-5.6.0 |
| Exam Name: | FortiWeb 5.6.0 Specialist |
| Date: | Nov 09, 2018 |
| File Size: | 62 KB |
Demo Questions
Question 1
Which of the following would be a reason for implementing rewrites?
- Page has been moved to a new URL
- Page has been moved to a new IP address
- Replace vulnerable functions.
- Send connection to secure channel
Correct answer: A
Question 2
A client is trying to start a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)
- Reply with a “403 Forbidden” HTTP error
- Allow the page access, but log the violation
- Automatically redirect the client to the login page
- Display an access policy message, then allow the client to continue, redirecting them to their requested page
- Prompt the client to authenticate
Correct answer: ABC
Explanation:
Question 3
Which is true about HTTPS on FortiWeb? (Choose three.)
- For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
- After enabling HSTS, redirects to HTTPS are no longer necessary.
- In true transparent mode, the TLS session terminator is a protected web server.
- Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
- In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
Correct answer: ACE
