Free Fortinet FCP_FWB_AD-7.4 Exam Questions

Become Fortinet Certified with updated FCP_FWB_AD-7.4 exam questions and correct answers

Page: 1 / 21

Total 101 Questions | Updated On: Sep 09, 2025

Add To Cart

Question 1

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.What FortiWeb feature should you configure?

A : Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

B : Enable SYN cookies.

C : Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.

D : Configure a server policy that matches requests from shared Internet connections.

Answer: B

Question 2

Which is true about HTTPS on FortiWeb? (Choose three.)

A : In true transparent mode, the TLS session terminator is a protected web server.

B : In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

C : After enabling HSTS, redirects to HTTPS are no longer necessary.

D : For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

E : Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

Answer: A,B,D

Question 3

Which two statements about running a vulnerability scan are true? (Choose two.)

A : You should run the vulnerability scan during a maintenance window.

B : You should run the vulnerability scan on a live website to get accurate results.

C : You should run the vulnerability scan in a test environment.

D : Vulnerability scanning increases the load on FortiWeb, so it should be avoided.

Answer: A,C

Question 4

In web application security, what does API protection primarily involve?

A : Safeguarding APIs from unauthorized access and abuse

B : Blocking SQL injection attacks

C : Encrypting HTML content

D : Monitoring server performance

Answer: A

Question 5

When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical?(Choose two)

A : Defines communication protocol

B : Defines Database Schema

C : Defines Log storage location

D : Defines Log file format

Answer: C,D

Page: 1 / 21

Total 101 Questions | Updated On: Sep 09, 2025

Add To Cart