Fortinet Exam NSE6_FWB-6.4 Topic 1 Question 32 Discussion

Actual exam question for Fortinet's NSE6_FWB-6.4 exam

Question #: 32
Topic #: 1

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.

What must the administrator do to avoid this problem? (Choose two.)

AEnable the Use X-Forwarded-For setting on FortiWeb.

BNo Special configuration is required; connectivity will be re-established after the set timeout.

CPlace FortiWeb in front of FortiADC.

DEnable the Add X-Forwarded-For setting on FortiWeb.

Show Suggested Answer

Suggested Answer: C

by Shenika at Apr 14, 2024, 06:27 PM

Limited Time Offer

25%

Off

Get Premium NSE6_FWB-6.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lynda

28 days ago

Option D, 'Enable the Add X-Forwarded-For setting on FortiWeb', seems like the most straightforward solution. Keep it simple, you know?

upvoted 0 times

...

Leslie

1 months ago

Haha, the setup is 'breaking all connectivity'? Sounds like a real nightmare! I'd definitely choose option A or D to avoid that headache.

upvoted 0 times

...

Corinne

1 months ago

Placing FortiWeb in front of FortiADC, as suggested in option C, could work, but it seems like an overly complicated solution. I'd go with option A or D instead.

upvoted 0 times

...

2 months ago

I think option A is the way to go. Enabling the Use X-Forwarded-For setting on FortiWeb should help preserve the original client IP address and avoid the connectivity issues.

upvoted 0 times