Question 1

Which FortiWeb configuration element is used to define rules for allowing or blocking specific types of traffic?

Options :

A : High Availability (HA)

B : Protected hostname

C : Firewall policy

D : Security profile

Answer: C

Question 2

What capability can FortiWeb add to your Web App that your Web App may or may not already have?

Options :

A : High Availability

B : Automatic backup and recovery

C : SSL Inspection

D : HTTP/HTML Form Authentication

Answer: D

Question 3

When configuring access control for a web application, which methods can be used to enforce security? (Select all that apply)

Options :

A : Captcha verification

B : Two-factor authentication (2FA)

C : Role-based access control (RBAC)

D : IP whitelisting

Answer: C,D

Question 4

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.What FortiWeb feature should you configure?

Options :

A : Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

B : Enable SYN cookies.

C : Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client-s private network IP, and to block attacks using that.

D : Configure a server policy that matches requests from shared Internet connections.

Answer: B

Question 5

In FortiWeb, which component is responsible for handling incoming traffic and applying security policies?

Options :

A : FortiGate

B : FortiManager

C : Server pool

D : Web Application Firewall (WAF)

Answer: D

Free FCP_FWB_AD-7.4 Mock Exam – Practice Online Confidently

Buying Options: