Fortinet NSE6_FWB-6.4 Actual Free Exam Questions & Community Discussion

Exam Code/Number: NSE6_FWB-6.4
Exam Name/Title: Fortinet NSE 6 - FortiWeb 6.4
Certification Provider: Fortinet
Corresponding Certification: NSE 6 Network Security Specialist

Exam Questions: 58
Updated On: Sep 22, 2026

Question #25

Which is true about HTTPS on FortiWeb? (Choose three.)

A. After enabling HSTS, redirects to HTTPS are no longer necessary.

B. In true transparent mode, the TLS session terminator is a protected web server.

C. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

D. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

E. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

Discussion 0

Correct Answer: B,C,E Vote an answer

Question #26

What other consideration must you take into account when configuring Defacement protection

A. Use FortiWeb to block SQL Injections and keep regular backups of the Database

B. None. FortiWeb completely secures the site against defacement attacks

C. Configure the FortiGate to perform Anti-Defacement as well

D. Also incorporate a FortiADC into your network

Discussion 0

Correct Answer: A Vote an answer

Question #27

What role does FortiWeb play in ensuring PCI DSS compliance?

A. Provides credit card processing capabilities

B. PCI specifically requires a WAF

C. Provides load balancing between multiple web servers

D. Provide ability to securely process cash transactions

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #28

Which statement about local user accounts is true?

A. They are best suited for large environments with many users.

B. They must be assigned, regardless of any other authentication.

C. They can be used for SSO.

D. They cannot be used for site publishing.

Discussion 0

Correct Answer: D Vote an answer

Question #29

Review the following configuration:

What is the expected result of this configuration setting?

A. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

B. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

C. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

D. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

Discussion 0

Correct Answer: C Vote an answer

Question #30

What key factor must be considered when setting brute force rate limiting and blocking?

A. Multiple clients from geographically diverse locations

B. A single client contacting multiple resources

C. Multiple clients connecting to multiple resources

D. Multiple clients sharing a single Internet connection

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Download Free Fortinet NSE6_FWB-6.4 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet NSE6_FWB-6.4 exam.