Free Fortinet FCP_FWB_AD-7.4 Exam Questions

Question 1

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.What FortiWeb feature should you configure?

A : Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

B : Enable SYN cookies.

C : Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.

D : Configure a server policy that matches requests from shared Internet connections.

Answer: B

Question 2

In web application security, what does API protection primarily involve?

A : Safeguarding APIs from unauthorized access and abuse

B : Blocking SQL injection attacks

C : Encrypting HTML content

D : Monitoring server performance

Answer: A

Question 3

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.What FortiWeb feature should you configure?

A : Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

B : Enable SYN cookies.

C : Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.

D : Configure a server policy that matches requests from shared Internet connections.

Answer: B

Question 4

What capability can FortiWeb add to your Web App that your Web App may or may not already have?

A : High Availability

B : Automatic backup and recovery

C : SSL Inspection

D : HTTP/HTML Form Authentication

Answer: D

Question 5

When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical?(Choose two)

A : Defines communication protocol

B : Defines Database Schema

C : Defines Log storage location

D : Defines Log file format

Answer: C,D