QUESTION: 5

Which of the following would be a reason for implementing rewrites?

Page has been moved to a new URL
Page has been moved to a new IP address
Replace vulnerable functions.
Send connection to secure channel

Answer(s): A

A client is trying to start a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Reply with a "403 Forbidden" HTTP error
Allow the page access, but log the violation
Automatically redirect the client to the login page
Display an access policy message, then allow the client to continue, redirecting them to their requested page
Prompt the client to authenticate

Answer(s): A,B,C

Reveal Solution Next Question

QUESTION: 7

Which is true about HTTPS on FortiWeb? (Choose three.)

For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
After enabling HSTS, redirects to HTTPS are no longer necessary.
In true transparent mode, the TLS session terminator is a protected web server.
Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Answer(s): A,C,E

Reveal Solution Next Question

QUESTION: 8

When viewing the attack logs on your FortiWeb, which IP Address is shown for the client when using XFF Header rules?

FortiGate's public IP
FortiGate's local IP
FortiWeb's IP
Client's real IP

Answer(s): D

Reveal Solution Next Question

Free NSE6_FWB-6.0 Exam Braindumps (page: 2)

QUESTION: 5

QUESTION: 6

QUESTION: 7

QUESTION: 8