Latest [Oct 22, 2025] FCP_FWB_AD-7.4 Exam Questions – Valid FCP_FWB_AD-7.4 Dumps Pdf
FCP_FWB_AD-7.4 Practice Test Questions Answers Updated 157 Questions
Fortinet FCP_FWB_AD-7.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 79
Which of the following are common reasons for configuring HTTP redirection in application delivery?
(Select all that apply)
- A. Blocking specific IP addresses
- B. Load balancing traffic
- C. Redirecting users to a different website
- D. Enforcing HTTPS for secure communication
Answer: C,D
NEW QUESTION # 80
What must you do with your FortiWeb logs to ensure PCI DSS compliance?
- A. Store in an off-site location
- B. Enable masking of sensitive data
- C. Erase them every two weeks
- D. Compress them into a .zip file format
Answer: B
NEW QUESTION # 81
Which would be a reason to implement HTTP rewriting?
- A. To replace a vulnerable element in a requested URL.
- B. To redirect HTTP to HTTPS.
- C. To implement load balancing.
- D. The original page has moved to a new URL.
Answer: B
Explanation:
HTTP rewriting is a feature in FortiWeb that allows administrators to modify HTTP requests and responses for various purposes, including security enhancements, user experience improvements, and application functionality. One common use case for HTTP rewriting is to redirect HTTP traffic to HTTPS, ensuring that all communications between clients and the server are encrypted and secure.
Explanation of Options:
A . To redirect HTTP to HTTPS: This is a valid reason to implement HTTP rewriting. By rewriting incoming HTTP requests to HTTPS, administrators can enforce secure connections, protecting data integrity and confidentiality. FortiWeb supports this functionality, allowing seamless redirection from HTTP to HTTPS.
B . To implement load balancing: Load balancing is not typically achieved through HTTP rewriting. Instead, it involves distributing network traffic across multiple servers to ensure availability and reliability. FortiWeb provides load balancing features, but these are separate from HTTP rewriting capabilities.
C . To replace a vulnerable element in a requested URL: While HTTP rewriting can modify URLs, its primary purpose is not to replace vulnerable elements within URLs. Addressing vulnerabilities typically involves input validation, sanitization, and other security measures rather than rewriting URLs.
D . The original page has moved to a new URL: This is another valid reason to implement HTTP rewriting. When a webpage's URL changes, rewriting rules can redirect requests from the old URL to the new one, ensuring users can still access the content without encountering errors.
In summary, both options A and D are correct reasons to implement HTTP rewriting. However, in the context of FortiWeb's functionalities, redirecting HTTP to HTTPS (option A) is a common and significant use case, as it enhances security by ensuring encrypted connections.
NEW QUESTION # 82
What is the purpose of using Web Application Firewalls (WAFs) in the context of web application security? (Select all that apply)
- A. Enforcing secure authentication
- B. Protecting against DDoS attacks
- C. Optimizing website performance
- D. Preventing SQL injection attacks
Answer: A,B,D
NEW QUESTION # 83
Which of the following is true about Local User Accounts?
- A. Can be used for Single Sign On
- B. Must be assigned regardless of any other authentication
- C. Can be used for site publishing
- D. Best suited for large environments with many users
Answer: C
NEW QUESTION # 84
Which regex expression is the correct format for redirecting the URL http://www.example.com?
- A. www\.example\.com
- B. www.example.com
- C. www/.example/.com
- D. www\example\com
Answer: B
NEW QUESTION # 85
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?
- A. Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.
- B. Configure a server policy that matches requests from shared Internet connections.
- C. Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.
- D. Enable SYN cookies.
Answer: D
NEW QUESTION # 86
Under which circumstance would you not use compression on FortiWeb?
- A. When the file is too big for the FortiWeb buffer.
- B. When the client Internet connections are slow.
- C. When the server is too heavily tasked.
- D. When the available bandwidth is low.
Answer: A
NEW QUESTION # 87
FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)
- A. HTTP session-based round robin
- B. Round robin
- C. HTTP content routes
- D. HTTP user-based round robin
Answer: B,C
NEW QUESTION # 88
What role does FortiWeb play in ensuring PCI DSS compliance?
- A. Provides credit card processing capabilities
- B. Provide ability to securely process cash transactions
- C. Provides load balancing between multiple web servers
- D. PCI specifically requires a WAF
Answer: D
NEW QUESTION # 89
Under which two circumstances does FortiWeb use its own certificates? (Choose two.)
- A. Connecting to browser clients using SSL
- B. Routing an HTTPS connection to a FortiGate
- C. An administrator session connecting to the GUI using HTTPS
- D. Making a secondary HTTPS connection to a server where FortiWeb acts as a client
Answer: C,D
Explanation:
Making a secondary HTTPS connection to a server where FortiWeb acts as a client: When FortiWeb needs to connect to an external server via HTTPS (acting as a client), it may use its own certificates for that connection.
An administrator session connecting to the GUI using HTTPS: FortiWeb uses its own certificates to secure the HTTPS connection between the administrator and the FortiWeb GUI. This ensures secure access for management purposes.
NEW QUESTION # 90
Examine the following code snippet:
servers:
- url: 'http://petstore.swagger.io/v1'
paths:
/pets:
get:
summary: List all pets
operationId: listPets
tags:
- pets
parameters:
- name: limit
in: query
description: How many items to return at one time (max 100)
required: true
schema:
$ref: '#/components/schemas/ref'
What is this a snippet from?
- A. An HTTP request restriction file
- B. An API schema file
- C. An API machine learning (ML) configuration file
- D. An XML schema file
Answer: B
NEW QUESTION # 91
In FortiWeb, which component is responsible for handling incoming traffic and applying security policies?
- A. FortiManager
- B. Web Application Firewall (WAF)
- C. Server pool
- D. FortiGate
Answer: B
NEW QUESTION # 92
What is the primary goal of bot detection and mitigation in web application security?
- A. Ensuring user privacy
- B. Enhancing user authentication
- C. Accelerating web application performance
- D. Identifying and blocking malicious bots
Answer: D
NEW QUESTION # 93
Which Layer 7 routing method does FortiWeb support?
- A. URL policy routing
- B. OSPF
- C. BGP
- D. HTTP content routing
Answer: D
Explanation:
FortiWeb is a Web Application Firewall (WAF) designed to protect web applications from various threats. Among its features, FortiWeb supports Layer 7 routing methods, which operate based on the content of the HTTP/HTTPS traffic.
HTTP Content Routing refers to the capability of directing incoming web traffic to specific backend servers based on characteristics found within the HTTP requests, such as URL paths, headers, or other content. This allows for more granular and efficient distribution of traffic, ensuring that requests are handled by the appropriate servers based on their content.
Analysis of Options:
A . URL policy routing: While this term suggests routing decisions based on URL policies, it is not a standard term used in FortiWeb's documentation. FortiWeb's content routing encompasses URL-based decisions, making this option less precise.
B . OSPF (Open Shortest Path First): This is a Layer 3 routing protocol used for IP routing within an Autonomous System. It operates at the network layer and is not related to Layer 7 routing methods.
C . BGP (Border Gateway Protocol): Another Layer 3 routing protocol, BGP is used for routing between Autonomous Systems on the internet. It does not pertain to Layer 7 or application-layer routing.
D . HTTP content routing: This aligns with FortiWeb's capabilities to make routing decisions based on the content of HTTP requests, such as URL paths, headers, or other application-layer data. This is a Layer 7 routing method supported by FortiWeb.
Therefore, the correct answer is D. HTTP content routing.
Reference:
FortiWeb 7.2.6 Administration Guide: "FortiWeb provides advanced Layer 7 load balancing and authentication offload services." cloud.orange-business.com FortiWeb Data Sheet: "FortiWeb provides advanced Layer 7 load balancing and authentication offload services." Exclusive Networks FortiWeb on OCB-FE - Installation and Deployment Guide: "FortiWeb provides advanced Layer 7 load balancing and authentication offload services." cloud.orange-business.com These references confirm that FortiWeb supports HTTP content routing as a Layer 7 routing method.
NEW QUESTION # 94
In which two ways does FortiWeb handle traffic that does not match any defined policies? (Choose two.)
- A. In true transparent mode, ip-forward should be enabled to deny the traffic.
- B. In transparent mode, the traffic is passed through.
- C. In reverse-proxy mode, the traffic is denied.
- D. In offline protection mode, the traffic is dropped with a TCP reset.
Answer: B,C
NEW QUESTION # 95
You are deploying FortiWeb 5.6.0 in an Amazon Web Services cloud.
Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A,C
NEW QUESTION # 96
Which is true about HTTPS on FortiWeb? (Choose three.)
- A. Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.
- B. After enabling HSTS, redirects to HTTPS are no longer necessary.
- C. In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.
- D. For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.
- E. In true transparent mode, the TLS session terminator is a protected web server.
Answer: C,D,E
NEW QUESTION # 97
Which command allows you to temporarily terminate a process that is consuming excessive amounts of resources?
- A. execute sys kill <processes id>
- B. execute sys terminate <process id>
- C. diagnose sys kill <process id>
- D. diagnose sys terminate <process id>
Answer: C
NEW QUESTION # 98
How are bot machine learning (ML) models different from API or anomaly detection models?
- A. Bot ML models detect only anomalies and not actual threats.
- B. Bot ML models analyze multiple connections overtime instead analyzing each connection as a single unit.
- C. Bot ML models do not update models periodically from new data.
- D. Bot ML models inspect more types of connection properties.
Answer: B
Explanation:
Bot ML models analyze multiple connections over time instead of analyzing each connection as a single unit: This is the key distinction. Bot ML models focus on analyzing patterns over a period of time, looking at behavioral patterns across multiple requests or connections from the same source to identify potential bot activity. Unlike traditional anomaly detection or API models that may focus on single connections or individual transactions, bot detection typically examines aggregated behavior to identify patterns indicative of bots, such as high-frequency requests or unusual traffic flows.
NEW QUESTION # 99
When configuring protected hostnames in FortiWeb, what is their primary purpose?
- A. Redirecting traffic to a specific URL
- B. Defining NAT policies
- C. Identifying internal network resources
- D. Blocking outgoing traffic
Answer: C
NEW QUESTION # 100
How can you mitigate attacks on authentication processes in a web application? (Select all that apply)
- A. Use secure password hashing algorithms
- B. Implement multi-factor authentication (MFA)
- C. Implement account lockout policies
- D. Disable all authentication mechanisms
Answer: A,B,C
NEW QUESTION # 101
When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?
- A. Virtual Server IP on the FortiGate
- B. FortiWeb's real IP
- C. Server's real IP
- D. IP Address of the Virtual Server on the FortiWeb
Answer: A
NEW QUESTION # 102
When configuring machine learning for web application security, what is the primary role of machine learning algorithms?
- A. Authenticating user credentials
- B. Encrypting sensitive data during transmission
- C. Filtering unwanted spam emails
- D. Identifying patterns and anomalies in web traffic
Answer: D
NEW QUESTION # 103
......
FCP_FWB_AD-7.4 dumps Sure Practice with 157 Questions: https://exams4sure.pdftorrent.com/FCP_FWB_AD-7.4-latest-dumps.html