Verified Fortinet FCP_FWB_AD-7.4 Dumps (V8.02) – Help You Pass FCP – FortiWeb 7.4 Administrator Exam Confidently

1. When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate's Real Server configuration point at?

2. Which HTTP response code is commonly used to indicate a permanent redirection in application delivery?

3. Which statement about local user accounts is true?

4. Which action must you take with your FortiWeb logs to ensure Payment Card Industry Data Security Standard (PCI DSS) compliance?

5. When configuring a wireless network for dynamic VLAN allocation, which three IETF attributes must be supplied by the radius server? (Choose three.)

6. When configuring threat mitigation features for a web application, what is the primary purpose of rate limiting?

7. Which compliance standards often require encryption and secure authentication for web applications? (Select all that apply)

8. Which two statements about distributed automatic radio resource provisioning (DARRP) are correct? (Choose two.)

9. In application delivery, what should be considered when configuring caching policies for dynamic content? (Select all that apply)

10. What are two advantages of using the URL rewriting and redirecting feature on FortiWeb? (Choose two.)

11. Where in the controller interface can you find a wireless client's upstream and downstream link rates?

12. Which operation mode requires additional configuration in order to allow FTP traffic into your web server?

13. What is an advantage of utilizing machine learning for web application security compared to rule-based approaches?

14. When enabling security fabric on the FortiGate interface to manage FortiAPs, which two types of communication channels are established between FortiGate and FortiAPs? (Choose two.)

15. The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.

Which two functions does the first layer perform? (Choose two.)

16. In which scenario might you want to use the compression feature on FortiWeb?

17. In FortiWeb, which component is responsible for handling incoming traffic and applying security policies?

18. Which command allows you to temporarily terminate a process that is consuming excessive amounts of resources?

19. When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

20. Refer to the exhibits.

FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

21. Examine the following code snippet:

servers:

- url: 'http://petstore.swagger.io/v1'

paths:

/pets:

get:

summary: List all pets

operationId: listPets

tags:

- pets

parameters:

- name: limit

in: query

description: How many items to return at one time (max 100)

required: true

schema:

$ref: '#/components/schemas/ref'

What is this a snippet from?

22. When configuring URL rewriting, what is the primary purpose of using regular expressions (regex)? (Select all that apply)

23. What is the purpose of a CAPTCHA in web application security?

24. What can an administrator do if a client has been incorrectly period blocked?

25. Which of the following steps is essential for troubleshooting deployment and system-related issues in FortiWeb?

26. Which implementation is best suited for a deployment that must meet compliance criteria?

27. How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

28. How does proper API protection contribute to compliance with data privacy regulations such as GDPR?

29. What is a common technique to mitigate Cross-Site Scripting (XSS) attacks in web applications?

30. What are the advantages of SSL inspection and SSL offloading in a web application firewall? (Select all that apply)

31. What should you consider when troubleshooting threat detection and mitigation-related issues in a web application? (Select all that apply)

32. Which is true about HTTPS on FortiWeb? (Choose three.)

33. Which of the following is a common challenge when implementing bot mitigation techniques?

34. Refer to the exhibit.

If rule 1 matches http://bwapp.fortinet.demo, rule 2 matches http://dvwa.fortinet.demo, and the default web protection profile is the inline protection profile, which protection profile will be applied to a connection to http://petstore.fortinet.demo?

35. How can you mitigate attacks on authentication processes in a web application? (Select all that apply)

36. Refer to the exhibit.

FortiADC is performing load balancing operations and directing traffic directly to the IP addresses of the web servers.

Which operating mode should the two FortiWeb devices use to pass traffic to the web servers?

37. When user tracking is configured, how does FortiWeb identify which users to track?

38. Under which circumstances does FortiWeb use its own certificates? (Choose Two)

39. Which regex expression is the correct format for redirecting the URL http://www.example.com?

40. How does bot detection and mitigation contribute to web application security?