Fast2test NSE6_FWB-6.1問題集30問でNSE 6 Network Security Specialistを確実実践 [Q11-Q32]

Fast2test NSE6_FWB-6.1問題集30問でNSE 6 Network Security Specialistを確実実践

リアル最新NSE6_FWB-6.1試験問題NSE6_FWB-6.1問題集

質問 11
What is one of the key benefits of the FortiGuard IP reputation feature?

A. It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.
B. It maintains a list of public IPs with a bad reputation for participating in attacks.
C. It is updated once per year.
D. It maintains a list of private IP addresses.

正解: B

解説:
FortiGuard IP Reputation service assigns a poor reputation, including virus-infected clients and malicious spiders/crawlers.

質問 12
Refer to the exhibit.

Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.
What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

A. Change Action under Action Settings to Alert
B. Disable Dynamically Update Model
C. Enable Bot Confirmation
D. Change Model Type to Strict

正解: C

解説:
Bot Confirmation
If the number of anomalies from a user has reached the Anomaly Count, the system executes Bot Confirmation before taking actions.
The Bot Confirmation is to confirm if the user is indeed a bot. The system sends RBE (Real Browser Enforcement) JavaScript or CAPTCHA to the client to double check if it's a real bot.

質問 13
In which scenario might you want to use the compression feature on FortiWeb?

A. When you are serving many corporate road warriors using 4G tablets and phones
B. When you are offering a music streaming service
C. Never, since most traffic today is already highly compressed
D. When you want to reduce buffering of video streams

正解: C

解説:
FortiWeb might expend resources compressing responses that have already been compressed by the server.

質問 14
When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

A. 0
B. 1
C. 2
D. 3

正解: A,C

質問 15
In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)

A. Transparent inspection
B. Offline protection
C. Reverse proxy
D. True transparent proxy

正解: B,D

解説:
FortiWeb appliances operating in offline protection mode or either of the transparent modes

質問 16
True transparent proxy mode is best suited for use in which type of environment?

A. Environments where you cannot change the IP addressing scheme
B. New networks where infrastructure is not yet defined
C. Small office to home office environments
D. Flexible environments where you can easily change the IP addressing scheme

正解: A

解説:
Does not require changes to the IP address scheme of the network. Requests are destined for a web server and not the FortiWeb appliance. This operation mode supports the same feature set as True Transparent Proxy mode.

質問 17
When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

A. Client real IP
B. FortiGate local IP
C. FortiWeb IP
D. FortiGate public IP

正解: A

解説:
When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.

質問 18
Review the following configuration:

What is the expected result of this configuration setting?

A. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
B. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.
C. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.
D. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

正解: D

質問 19
Which regex expression is the correct format for redirecting the URL http://www.example.com?

A. www.example.com
B. www/.example/.com
C. www\.example\.com
D. www\example\com

正解: A

解説:
\1://www.company.com/\2/\3

質問 20
What must you do with your FortiWeb logs to ensure PCI DSS compliance?

A. Compress them into a .zip file format
B. Store in an off-site location
C. Erase them every two weeks
D. Enable masking of sensitive data

正解: D

質問 21
What can an administrator do if a client has been incorrectly period blocked?

A. Force a new IP address to the client.
B. Disconnect the client from the network.
C. Nothing, it is not possible to override a period block.
D. Manually release the ID address from the temporary blacklist.

正解: D

解説:
Block Period
Enter the number of seconds that you want to block the requests. The valid range is 1-3,600 seconds. The default value is 60 seconds.
This option only takes effect when you choose Period Block in Action.
Note: That's a temporary blacklist so you can manually release them from the blacklist.

質問 22
A client is trying to start a session from a page that would normally be accessible only after the client has logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)