Question 1

When configuring access control for a web application, which methods can be used to enforce security? (Select all that apply)

Options :

A : Captcha verification

B : Two-factor authentication (2FA)

C : Role-based access control (RBAC)

D : IP whitelisting

Answer: C,D

Question 2

Which is true about HTTPS on FortiWeb? (Choose three.)

Options :

A : In true transparent mode, the TLS session terminator is a protected web server.

B : In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

C : After enabling HSTS, redirects to HTTPS are no longer necessary.

D : For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

E : Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

Answer: A,B,D

Question 3

What is the primary benefit of using a content delivery network (CDN) in application delivery?

Options :

A : Enhanced content distribution and availability

B : Improved server security

C : Simplified URL rewriting

D : Centralized content management

Answer: A

Question 4

What is the primary purpose of configuring threat mitigation features in web application security?

Options :

A : Enhancing application performance

B : Optimizing database management

C : Improving user interface design

D : Protecting against malicious activities and attacks

Answer: D

Question 5

Which FortiWeb configuration element is used to define rules for allowing or blocking specific types of traffic?

Options :

A : High Availability (HA)

B : Protected hostname

C : Firewall policy

D : Security profile

Answer: C

Free FCP_FWB_AD-7.4 Mock Exam – Practice Online Confidently