Fortinet Exam NSE6_FWB-6.4 Topic 8 Question 30 Discussion

Actual exam question for Fortinet's NSE6_FWB-6.4 exam

Question #: 30
Topic #: 8

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.

What FortiWeb feature should you configure?

AEnable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

BConfigure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.

CEnable SYN cookies.

DConfigure a server policy that matches requests from shared Internet connections.

Show Suggested Answer

Suggested Answer: C

by Devorah at Mar 04, 2024, 05:49 PM

Limited Time Offer

25%

Off

Get Premium NSE6_FWB-6.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shakira

1 days ago

I think option A is the best choice because it allows us to configure separate rate limits for requests from NATted source IPs.

upvoted 0 times

...

Layla

23 days ago

Haha, option C made me chuckle a bit. Enabling SYN cookies is a classic TCP/IP security trick, but I don't think it's the best fit for this specific scenario.

upvoted 0 times

...

26 days ago

I think this question is really testing our understanding of network security concepts. Dealing with DDoS attacks is a common challenge for web apps, so we need to be familiar with the different features FortiWeb offers to mitigate these threats.

upvoted 0 times

...