Free NSE6_FWB-6.4 Practice Questions and Answers | Updated 2025

• Question 1

  What must you do with your FortiWeb logs to ensure PCI DSS compliance?

  • Store in an off-site location
  • Erase them every two weeks
  • Enable masking of sensitive data
  • Compress them into a .zip file format

  Show Answer Answer: C Next

• Question 2

  Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?

  • Sensitive info masking
  • Poison Cookie detection
  • Session Management
  • Brute Force blocking

  Show Answer Answer: C Next

• Question 3

  Which implementation is best suited for a deployment that must meet compliance criteria?

  • SSL Inspection with FortiWeb in Transparency mode
  • SSL Offloading with FortiWeb in reverse proxy mode
  • SSL Inspection with FrotiWeb in Reverse Proxy mode
  • SSL Offloading with FortiWeb in Transparency Mode

  Show Answer Answer: C Next

• Question 4

  In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)

  • Offline protection
  • Transparent inspection
  • True transparent proxy
  • Reverse proxy

  Show Answer Answer: C, D Next

• Question 5

  What is one of the key benefits of the FortiGuard IP reputation feature?

  • It maintains a list of private IP addresses.
  • It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.
  • It is updated once per year.
  • It maintains a list of public IPs with a bad reputation for participating in attacks.

  Show Answer Answer: D Next