NSE 6 Network Security Specialist NSE6_FWB-6.1練習テストエンジン: 今すぐ試そう30試験問題
試験合格保証付きのNSE 6 Network Security Specialist NSE6_FWB-6.1試験問題集
質問 14
Which statement about local user accounts is true?
- A. They must be assigned, regardless of any other authentication.
- B. They cannot be used for site publishing.
- C. They are best suited for large environments with many users.
- D. They can be used for SSO.
正解: D
解説:
You can configure the Remedy Single Sign-On server to authenticate TrueSight Capacity Optimization users as local users.
質問 15
Refer to the exhibit.
There is only one administrator account configured on FortiWeb. What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?
- A. The configuration changes must be made on the upstream device.
- B. Configure IPv4 Trusted Host # 3 with a specific IP address.
- C. Change the Access Profile to Read_Only.
- D. Delete the built-in administrator user and create a new one.
正解: D
質問 16
What must you do with your FortiWeb logs to ensure PCI DSS compliance?
- A. Compress them into a .zip file format
- B. Store in an off-site location
- C. Erase them every two weeks
- D. Enable masking of sensitive data
正解: D
質問 17
When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?
- A. FortiWeb IP
- B. FortiGate public IP
- C. FortiGate local IP
- D. Client real IP
正解: D
解説:
When an XFF header reaches Alteon from a client, Alteon removes all the content from the header and injects the client IP address. Alteon then forwards the header to the server.
質問 18
True transparent proxy mode is best suited for use in which type of environment?
- A. New networks where infrastructure is not yet defined
- B. Small office to home office environments
- C. Environments where you cannot change the IP addressing scheme
- D. Flexible environments where you can easily change the IP addressing scheme
正解: C
解説:
Does not require changes to the IP address scheme of the network. Requests are destined for a web server and not the FortiWeb appliance. This operation mode supports the same feature set as True Transparent Proxy mode.
質問 19
Review the following configuration:
What is the expected result of this configuration setting?
- A. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
- B. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
- C. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.
- D. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.
正解: B
質問 20
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?
- A. If you are a small business or home office
- B. If you are an enterprise whose resources do not need security
- C. If you are an enterprise whose employees use only mobile devices
- D. If you are an enterprise whose computers all trust your active directory or other CA server
正解: B
解説:
This can include SSL/TLS certificates, code signing certificates, and S/MIME certificates. The reason why they're considered different from traditional certificate-authority signed certificates is that they're created, issued, and signed by the company or developer who is responsible for the website or software being signed. This is why self-signed certificates are considered unsafe for public-facing websites and applications.
質問 21
What can an administrator do if a client has been incorrectly period blocked?
- A. Disconnect the client from the network.
- B. Manually release the ID address from the temporary blacklist.
- C. Force a new IP address to the client.
- D. Nothing, it is not possible to override a period block.
正解: B
解説:
Block Period
Enter the number of seconds that you want to block the requests. The valid range is 1-3,600 seconds. The default value is 60 seconds.
This option only takes effect when you choose Period Block in Action.
Note: That's a temporary blacklist so you can manually release them from the blacklist.
質問 22
You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?
- A. You must put the single web server in to a server pool, in order to use it with HTTP content routing.
- B. The server policy applies the same protection profile to all of its protected web applications.
- C. You must chain policies so that requests for web application A go to the virtual server for policy A, and requests for web application B go to the virtual server for policy B.
- D. Static or policy-based routes are not required.
正解: D
質問 23
Refer to the exhibit.
Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)
- A. Traffic will be interrupted between port3 and port4.
- B. Traffic will pass between port5 and port6 uninspected.
- C. All traffic will be interrupted.
- D. Traffic that passes between port5 and port6 will be inspected.
正解: A,B
質問 24
In which scenario might you want to use the compression feature on FortiWeb?
- A. Never, since most traffic today is already highly compressed
- B. When you are serving many corporate road warriors using 4G tablets and phones
- C. When you are offering a music streaming service
- D. When you want to reduce buffering of video streams
正解: A
解説:
FortiWeb might expend resources compressing responses that have already been compressed by the server.
質問 25
What is one of the key benefits of the FortiGuard IP reputation feature?
- A. It maintains a list of private IP addresses.
- B. It is updated once per year.
- C. It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.
- D. It maintains a list of public IPs with a bad reputation for participating in attacks.
正解: D
解説:
FortiGuard IP Reputation service assigns a poor reputation, including virus-infected clients and malicious spiders/crawlers.
質問 26
......
テストエンジン練習NSE6_FWB-6.1テスト問題：https://jp.fast2test.com/NSE6_FWB-6.1-premium-file.html