Fortinet NSE6_FWB-6.4 問題集

質問 1：
You are configuring FortiAnalyzer to store logs from FortiWeb.
Which is true?
A. You must enable ADOMs on FortiAnalyzer.
B. To store logs from FortiWeb 6.4, on FortiAnalyzer, you must select "FrotiWeb 6.1".
C. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.
D. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
正解：A

質問 2：
A client is trying to start a session from a page that would normally be accessible only after the client has logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)
A. Allow the page access, but log the violation
B. Prompt the client to authenticate
C. Reply with a 403 Forbidden HTTP error
D. Redirect the client to the login page
E. Display an access policy message, then allow the client to continue
正解：A,C,D

質問 3：
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)
A. Determines if a detected threat is a false-positive or not
B. Builds a threat model behind every parameter and HTTP method
C. Determines whether traffic is an anomaly, based on observed application traffic over time
D. Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which implementation is best suited for a deployment that must meet compliance criteria?
A. SSL Inspection with FortiWeb in Transparency mode
B. SSL Offloading with FortiWeb in Transparency Mode
C. SSL Inspection with FrotiWeb in Reverse Proxy mode
D. SSL Offloading with FortiWeb in reverse proxy mode
正解：C

質問 5：
You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server.
Which is true about the solution?
A. The server policy applies the same protection profile to all its protected web apps.
B. To achieve HTTP content routing, you must chain policies: the first policy accepts all traffic, and forwards requests for web app A to the virtual server for policy A. It also forwards requests for web app B to the virtual server for policy B. Policy A and Policy B apply their app-specific protection profiles, and then distribute that app's traffic among all members of the server farm.
C. You must put the single web server into a server pool in order to use it with HTTP content routing.
D. Static or policy-based routes are not required.
正解：B

質問 6：
What key factor must be considered when setting brute force rate limiting and blocking?
A. Multiple clients sharing a single Internet connection
B. A single client contacting multiple resources
C. Multiple clients from geographically diverse locations
D. Multiple clients connecting to multiple resources
正解：A
解説: (Topexam メンバーにのみ表示されます)