Amazon
Avaya
Cisco
CompTIA
CrowdStrike
EC-Council
EXIN
Fortinet
Google
ISC
ISC2
ITIL
Juniper
Microsoft
NVIDIA
Okta
Palo Alto Networks
Salesforce
SAP
ServiceNow
All Vendors
  1. Home
  2. Fortinet
  3. NSE6_FWB-6.4

Fortinet NSE6_FWB-6.4 Exam (page: 1)
Fortinet NSE 6 - FortiWeb 6.4
Updated on: 31-Mar-2026

Viewing Page 1 of 13
NSE6_FWB-6.4 PDF 56 Questions

Which two statements about running a vulnerability scan are true? (Choose two.)

  1. You should run the vulnerability scan during a maintenance window.
  2. You should run the vulnerability scan in a test environment.
  3. Vulnerability scanning increases the load on FortiWeb, so it should be avoided.
  4. You should run the vulnerability scan on a live website to get accurate results.

Answer(s): A,B

Explanation:

Should the Vulnerability Scanner allow it, SVMS will set the scan schedule (or schedules) to run in a maintenance window. SVMS will advise Client of the scanner's ability to complete the scan(s) within the maintenance window.
Vulnerabilities on live web sites. Instead, duplicate the web site and its database in a test environment.


Reference:

https://www.trustwave.com/media/17427/trustwave_mss_managed-3rd-party- vulnerability-scanning.pdf https://help.fortinet.com/fweb/552/Content/FortiWeb/fortiweb-admin/vulnerability_scans.htm



FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

  1. Round robin
  2. HTTP session-based round robin
  3. HTTP user-based round robin
  4. HTTP content routes

Answer(s): A,D


Reference:

https://docs.fortinet.com/document/fortiweb/6.3.0/administration- guide/399384/defining-your-web-servers http://fortinet.globalgate.com.ar/pdfs/FortiWeb/FortiWeb_DS.pdf



Which would be a reason to implement HTTP rewriting?

  1. The original page has moved to a new URL
  2. To replace a vulnerable function in the requested URL
  3. To send the request to secure channel
  4. The original page has moved to a new IP address

Answer(s): B

Explanation:

Create a new URL rewriting rule.


Reference:

https://docs.fortinet.com/document/fortiweb/6.3.0/administration- guide/961303/rewriting-redirecting



Refer to the exhibit.



FortiADC is applying SNAT to all inbound traffic going to the servers.
When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

  1. Enable the Use X-Forwarded-For setting on FortiWeb.
  2. No Special configuration is required; connectivity will be re-established after the set timeout.
  3. Place FortiWeb in front of FortiAD
  4. Enable the Add X-Forwarded-For setting on FortiWeb.

Answer(s): A,C

Explanation:

Configure your load balancer to insert or append to an X-Forwarded-For:, X-Real-IP:, or other HTTP X- header. Also configure FortiWeb to find the original attacker's or client's IP address in that HTTP header


Reference:

https://help.fortinet.com/fweb/560/Content/FortiWeb/fortiweb- admin/planning_topology.htm



Which statement about local user accounts is true?

  1. They are best suited for large environments with many users.
  2. They cannot be used for site publishing.
  3. They must be assigned, regardless of any other authentication.
  4. They can be used for SSO.

Answer(s): B



Viewing Page 1 of 13



Share your comments for Fortinet NSE6_FWB-6.4 exam with other users:

Philippe 1/22/2023 10:24:00 AM

iam impressed with the quality of these dumps. they questions and answers were easy to understand and the xengine app was very helpful to use.
CANADA


Sam 8/31/2023 10:32:00 AM

not bad but you question database from isaca
MALAYSIA


Brijesh kr 6/29/2023 4:07:00 AM

awesome contents
INDIA


JM 12/19/2023 1:22:00 PM

answer to 134 is casb. while data loss prevention is the goal, in order to implement dlp in cloud applications you need to deploy a casb.
UNITED STATES


Neo 7/26/2023 9:36:00 AM

are these brain dumps sufficient enough to go write exam after practicing them? or does one need more material this wont be enough?
SOUTH AFRICA


Bilal 8/22/2023 6:33:00 AM

i did attend the required cources and i need to be sure that i am ready to take the exam, i would ask you please to share the questions, to be sure that i am fit to proceed with taking the exam.
Anonymous


John 11/12/2023 8:48:00 PM

why only give explanations on some, and not all questions and their respective answers?
UNITED STATES


Biswa 11/20/2023 8:50:00 AM

refresh db knowledge
Anonymous


Shalini Sharma 10/17/2023 8:29:00 AM

interested for sap certification
JAPAN


ethan 9/24/2023 12:38:00 PM

could you please upload practice questions for scr exam ?
HONG KONG


vijay joshi 8/19/2023 3:15:00 AM

please upload free oracle cloud infrastructure 2023 foundations associate exam braindumps
Anonymous


Ayodele Talabi 8/25/2023 9:25:00 PM

sweating! they are tricky
CANADA


Romero 3/23/2022 4:20:00 PM

i never use these dumps sites but i had to do it for this exam as it is impossible to pass without using these question dumps.
UNITED STATES


John Kennedy 9/20/2023 3:33:00 AM

good practice and well sites.
Anonymous


Nenad 7/12/2022 11:05:00 PM

passed my first exam last week and pass the second exam this morning. thank you sir for all the help and these brian dumps.
INDIA


Lucky 10/31/2023 2:01:00 PM

does anyone who attended exam csa 8.8, can confirm these questions are really coming ? or these are just for practicing?
HONG KONG


Prateek 9/18/2023 11:13:00 AM

kindly share the dumps
UNITED STATES


Irfan 11/25/2023 1:26:00 AM

very nice content
Anonymous


php 6/16/2023 12:49:00 AM

passed today
Anonymous


Durga 6/23/2023 1:22:00 AM

hi can you please upload questions
Anonymous


JJ 5/28/2023 4:32:00 AM

please upload quetions
THAILAND


Norris 1/3/2023 8:06:00 PM

i passed my exam thanks to this braindumps questions. these questions are valid in us and i highly recommend it!
UNITED STATES


abuti 7/21/2023 6:10:00 PM

are they truely latest
Anonymous


Curtis Nakawaki 7/5/2023 8:46:00 PM

questions appear contemporary.
UNITED STATES


Vv 12/2/2023 6:31:00 AM

good to prepare in this site
UNITED STATES


praveenkumar 11/20/2023 11:57:00 AM

very helpful to crack first attempt
Anonymous


asad Raza 5/15/2023 5:38:00 AM

please upload this exam
CHINA


Reeta 7/17/2023 5:22:00 PM

please upload the c_activate22 dump questions with answer
SWEDEN


Wong 12/20/2023 11:34:00 AM

q10 - the answer should be a. if its c, the criteria will meet if either the prospect is not part of the suppression lists or if the job title contains vice president
MALAYSIA


david 12/12/2023 12:38:00 PM

this was on the exam as of 1211/2023
Anonymous


Tink 7/24/2023 9:23:00 AM

great for prep
GERMANY


Jaro 12/18/2023 3:12:00 PM

i think in question 7 the first answer should be power bi portal (not power bi)
Anonymous


9eagles 4/7/2023 10:04:00 AM

on question 10 and so far 2 wrong answers as evident in the included reference link.
Anonymous


Tai 8/28/2023 5:28:00 AM

wonderful material
SOUTH AFRICA