Exam series: NSE6_FWB-6.4
Number of questions: 33
Exam time: 60 minutes
Language: English and Japanese
Product version: FortiWeb 6.4
Status: Available
Exam details: exam description
NSE 6 Certification
The Network Security Specialist designation recognizes your comprehensive skills with fabric products beyond the firewall. This designation is recognized after you achieve at least four Fortinet Specialist certificates on Fortinet enhanced
products. Visit the Fortinet NSE Certification Program page for information about certification requirements.
Fortinet NSE 6—FortiWeb 6.4 Exam
The Fortinet NSE 6—FortiWeb 6.4 exam is part of the NSE 6 Network Security Specialist program, and certifies that the successful candidate has mastered important knowledge and skills to deploy, configure, administer, manage and monitor
FortiWeb devices to protect web application servers from threats.
This exam will test a candidate’s knowledge and skills related to basic to advanced configuration, day-to-day management, and using FortiWeb to protect web applications from threats.
Audience
The Fortinet NSE 6—FortiWeb 6.4 exam is intended for security professionals involved in the configuration, administration, management, monitoring, and troubleshooting of FortiWeb devices in small to enterprise deployments
Exam Details
Exam name Fortinet NSE 6—FortiWeb 6.4
Exam series NSE6_FWB-6.4
Time allowed 60 minutes
Exam questions 33 multiple-choice questions
Scoring Pass or fail, a score report is available from your Pearson VUE account
Language English, Japanese
Product version FortiWeb 6.4
Exam Topics
Successful candidates have applied knowledge and skills in the following areas and tasks:
* Deployment and Configuration
* Identify FortiWeb deployment requirements
* Configure system settings
* Configure server pools, policies, and protected hostnames
* Configure FortiWeb HA
* Troubleshoot deployment and system related issues
* Encryption, Authentication, and Compliance
* Mitigate web application vulnerabilities
* Configure various access contro* and tracking methods
* Mitigate attacks on authentication
* Configure SS* inspection and offloading
* Trobleshoot encryption and authentication related issues
* Web Aapplication Security
* Configure various threat mitigation features
* Configure machine learning and bot detection
* Configure API protection and bot mitigation
* Troubleshoot threat detection and mitigation related issues
* Application Delivery
* Configure HTTP content routing, rewriting, and redirection
* Configure caching and compression
* Troublehsoot application delivery related issues
Training Resources
The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, candidates are strongly
encouraged to have hands-on experience with the exam topics and objectives.
NSE Training Institute Course
* NSE 6 FortiWeb
Other Resources
* FortiWeb Administration Guide
Experience
* Minimum of six months of hands-on experience with FortiWeb
Exam Sample Questions
A set of sample questions is available from the Fortinet Training Institute. These questions sample the exam content in question type and content scope. However, the questions do not necessarily represent all the exam content, nor are they
intended to assess an individual’s readiness to take the certification exam.
See the Fortinet Training Institute for the course that includes the sample questions.
Examination Policies and Procedures
The Fortinet Training Institute recommends that candidates review exam policies and procedures before registering for
the exam. Access important information on the Program Policies page, and find answers to common questions on the FAQ page.
Questions?
If you have more questions about the NSE Program, contact your regional training team though the Contact Us page.
Examkingdom Fortinet NSE6_FWB-6.4 Exam pdf, Certkingdom Fortinet NSE6_FWB-6.4 Exam PDF
Best Fortinet NSE6_FWB-6.4 Certification, Fortinet NSE6_FWB-6.4 Training at Certkingdom.com
QUESTION 1
Which two statements about running a vulnerability scan are true? (Choose two.)
A. You should run the vulnerability scan during a maintenance window.
B. You should run the vulnerability scan in a test environment.
C. Vulnerability scanning increases the load on FortiWeb, so it should be avoided.
D. You should run the vulnerability scan on a live website to get accurate results.
Answer: A, B
Explanation:
Should the Vulnerability Scanner allow it, SVMS will set the scan schedule (or schedules) to run in a maintenance window. SVMS will advise Client of the scanner’s ability to complete the scan(s) within the maintenance window.
Vulnerabilities on live web sites. Instead, duplicate the web site and its database in a test environment.
QUESTION 2
FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)
A. Round robin
B. HTTP session-based round robin
C. HTTP user-based round robin
D. HTTP content routes
Answer: A, D
QUESTION 3
Which would be a reason to implement HTTP rewriting?
A. The original page has moved to a new URL
B. To replace a vulnerable function in the requested URL
C. To send the request to secure channel
D. The original page has moved to a new IP address
Answer: B
QUESTION 4
Which statement about local user accounts is true?
A. They are best suited for large environments with many users.
B. They cannot be used for site publishing.
C. They must be assigned, regardless of any other authentication.
D. They can be used for SSO.
Answer: B