Fortinet NSE 6 - FortiWeb 6.1

Here you have the best Fortinet NSE6_FWB-6.1 practice exam questions

You have 30 total questions to study from
Each page has 5 questions, making a total of 6 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 28, 2025
This site is not affiliated with or endorsed by Fortinet.

Question 1 of 30

Which two statements about running a vulnerability scan are true? (Choose two.)

You should run the vulnerability scan during a maintenance window.

You should run the vulnerability scan in a test environment.

Vulnerability scanning increases the load on FortiWeb, so it should be avoided.

You should run the vulnerability scan on a live website to get accurate results.

Correct Answer: A, B

Question 2 of 30

FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

Round robin

HTTP session-based round robin

HTTP user-based round robin

HTTP content routes

Correct Answer: A, D

Question 3 of 30

Which would be a reason to implement HTTP rewriting?

The original page has moved to a new URL

To replace a vulnerable function in the requested URL

To send the request to secure channel

The original page has moved to a new IP address

Correct Answer: A

Question 4 of 30

Refer to the exhibit.
Exam NSE6_FWB-6.1: Question 4 - Image 1

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

Enable the Use X-Forwarded-For setting on FortiWeb.

No Special configuration is required; connectivity will be re-established after the set timeout.

Place FortiWeb in front of FortiADC.

Enable the Add X-Forwarded-For setting on FortiWeb.

Correct Answer: A, D

Question 5 of 30

Which statement about local user accounts is true?

They are best suited for large environments with many users.

They cannot be used for site publishing.

They must be assigned, regardless of any other authentication.

They can be used for SSO.

Correct Answer: B