Free NSE6_FWB-6.4 Exam Braindumps
Fortinet NSE 6 - FortiWeb 6.4 Questions 11–15 (page: 4)

Updated On: 10-Feb-2026

What can an administrator do if a client has been incorrectly period blocked?

  1. Nothing, it is not possible to override a period block.
  2. Manually release the ID address from the temporary blacklist.
  3. Force a new IP address to the client.
  4. Disconnect the client from the network.

Answer(s): B

Explanation:

Block Period
Enter the number of seconds that you want to block the requests. The valid range is 1­3,600 seconds. The default value is 60 seconds.
This option only takes effect when you choose Period Block in Action.
Note: That's a temporary blacklist so you can manually release them from the blacklist.


Reference:

https://docs.fortinet.com/document/fortiweb/6.3.1/administration- guide/600188/configuring-bot-detection-profiles



Which regex expression is the correct format for redirecting the URL http://www.example.com?

  1. www\.example\.com
  2. www.example.com
  3. www\example\com
  4. www/.example/.com

Answer(s): B

Explanation:

\1://www.company.com/\2/\3


Reference:

https://learn.akamai.com/en-us/webhelp/edge-redirector/edge-redirector-guide/GUID- 0C22DFC2-DCC4-42AF-BDB2-9537FBEE03FD.html



When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

  1. 403
  2. 302
  3. 301
  4. 404

Answer(s): B,C


Reference:

https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/302



True transparent proxy mode is best suited for use in which type of environment?

  1. New networks where infrastructure is not yet defined
  2. Flexible environments where you can easily change the IP addressing scheme
  3. Small office to home office environments
  4. Environments where you cannot change the IP addressing scheme

Answer(s): B

Explanation:

"Because blocking is not guaranteed to succeed in offline mode, this mode is best used during the evaluation and planning phase, early in implementation. Reverse proxy is the most popular operating mode. It can rewrite URLs, offload TLS, load balance, and apply NAT. For very large MSSP, true transparent mode has a significant advantage. You can drop it in without changing any schemes of limited IPv4 space­in transparent mode, you don't need to give IP addresses to the network interfaces on FortiWeb."



Review the following configuration:



What is the expected result of this configuration setting?

  1. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
  2. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
  3. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.
  4. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

Answer(s): A



Viewing page 4 of 13
Viewing questions 16 - 20 out of 56 questions


Post your Comments and Discuss Fortinet NSE6_FWB-6.4 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!