Free Fortinet NSE6_FWB-6.4 Exam Dumps Questions & Answers

What is one of the key benefits of the FortiGuard IP reputation feature?

• A.  It maintains a list of private IP addresses.
• B.  It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.
• C.  It is updated once per year.
• D.  It maintains a list of public IPs with a bad reputation for participating in attacks.

Which is true about HTTPS on FortiWeb? (Choose three.)

• A.  In true transparent mode, the TLS session terminator is a protected web server.
• B.  In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
• C.  For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
• D.  After enabling HSTS, redirects to HTTPS are no longer necessary.
• E.  Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

What key factor must be considered when setting brute force rate limiting and blocking?

• A.  Multiple clients connecting to multiple resources
• B.  Multiple clients from geographically diverse locations
• C.  A single client contacting multiple resources
• D.  Multiple clients sharing a single Internet connection

Which of the following is true about Local User Accounts?

• A.  Must be assigned regardless of any other authentication
• B.  Can be used for Single Sign On
• C.  Can be used for site publishing
• D.  Best suited for large environments with many users

How does an ADOM differ from a VDOM?

• A.  ADOMs improve performance by offloading some functions.
• B.  ADOMs only affect specific functions, and do not provide full separation like VDOMs do.
• C.  ADOMs do not have virtual networking
• D.  Allows you to have 1 administrator for multiple tenants