[Sep 06, 2021] NSE6_FWB-6.1 Ultimate Study Guide - TorrentVCE
Ultimate Guide to Prepare NSE6_FWB-6.1 Certification Exam for NSE 6 Network Security Specialist in 2021
NEW QUESTION 16
In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)
- A. True transparent proxy
- B. Transparent inspection
- C. Offline protection
- D. Reverse proxy
Answer: A,C
Explanation:
FortiWeb appliances operating in offline protection mode or either of the transparent modes
NEW QUESTION 17
Which regex expression is the correct format for redirecting the URL http://www.example.com?
- A. www\.example\.com
- B. www.example.com
- C. www/.example/.com
- D. www\example\com
Answer: B
Explanation:
\1://www.company.com/\2/\3
NEW QUESTION 18
True transparent proxy mode is best suited for use in which type of environment?
- A. Flexible environments where you can easily change the IP addressing scheme
- B. New networks where infrastructure is not yet defined
- C. Environments where you cannot change the IP addressing scheme
- D. Small office to home office environments
Answer: C
Explanation:
Does not require changes to the IP address scheme of the network. Requests are destined for a web server and not the FortiWeb appliance. This operation mode supports the same feature set as True Transparent Proxy mode.
NEW QUESTION 19
In which scenario might you want to use the compression feature on FortiWeb?
- A. When you are serving many corporate road warriors using 4G tablets and phones
- B. Never, since most traffic today is already highly compressed
- C. When you want to reduce buffering of video streams
- D. When you are offering a music streaming service
Answer: B
Explanation:
FortiWeb might expend resources compressing responses that have already been compressed by the server.
NEW QUESTION 20
Which algorithm is used to build mathematical models for bot detection?
- A. HCM
- B. HMM
- C. SVN
- D. SVM
Answer: D
Explanation:
FortiWeb uses SVM (Support Vector Machine) algorithm to build up the bot detection model
NEW QUESTION 21
What can an administrator do if a client has been incorrectly period blocked?
- A. Nothing, it is not possible to override a period block.
- B. Manually release the ID address from the temporary blacklist.
- C. Force a new IP address to the client.
- D. Disconnect the client from the network.
Answer: B
Explanation:
Block Period
Enter the number of seconds that you want to block the requests. The valid range is 1-3,600 seconds. The default value is 60 seconds.
This option only takes effect when you choose Period Block in Action.
Note: That's a temporary blacklist so you can manually release them from the blacklist.
NEW QUESTION 22
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)
- A. Builds a threat model behind every parameter and HTTP method
- B. Determines if a detected threat is a false-positive or not
- C. Determines whether traffic is an anomaly, based on observed application traffic over time
- D. Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored
Answer: A,C
Explanation:
The first layer uses the Hidden Markov Model (HMM) and monitors access to the application and collects data to build a mathematical model behind every parameter and HTTP method.
NEW QUESTION 23
Review the following configuration:
What is the expected result of this configuration setting?
- A. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.
- B. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
- C. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
- D. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.
Answer: C
NEW QUESTION 24
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?
- A. If you are a small business or home office
- B. If you are an enterprise whose resources do not need security
- C. If you are an enterprise whose employees use only mobile devices
- D. If you are an enterprise whose computers all trust your active directory or other CA server
Answer: B
Explanation:
This can include SSL/TLS certificates, code signing certificates, and S/MIME certificates. The reason why they're considered different from traditional certificate-authority signed certificates is that they're created, issued, and signed by the company or developer who is responsible for the website or software being signed. This is why self-signed certificates are considered unsafe for public-facing websites and applications.
NEW QUESTION 25
What must you do with your FortiWeb logs to ensure PCI DSS compliance?
- A. Compress them into a .zip file format
- B. Erase them every two weeks
- C. Store in an off-site location
- D. Enable masking of sensitive data
Answer: D
NEW QUESTION 26
What is one of the key benefits of the FortiGuard IP reputation feature?
- A. It maintains a list of private IP addresses.
- B. It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.
- C. It maintains a list of public IPs with a bad reputation for participating in attacks.
- D. It is updated once per year.
Answer: C
Explanation:
FortiGuard IP Reputation service assigns a poor reputation, including virus-infected clients and malicious spiders/crawlers.
NEW QUESTION 27
FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)
- A. HTTP user-based round robin
- B. Round robin
- C. HTTP session-based round robin
- D. HTTP content routes
Answer: B,D
Explanation:
Reference:
http://fortinet.globalgate.com.ar/pdfs/FortiWeb/FortiWeb_DS.pdf
NEW QUESTION 28
......
NSE 6 Network Security Specialist Fundamentals-NSE6_FWB-6.1 Exam-Practice-Dumps: https://www.torrentvce.com/NSE6_FWB-6.1-valid-vce-collection.html