Free Fortinet FCP_FWB_AD-7.4 Exam Questions

Become Fortinet Certified with updated FCP_FWB_AD-7.4 exam questions and correct answers

Page: 1 / 21

Total 101 Questions | Updated On: May 11, 2026

Add To Cart

Question 1

In web application security, what does API protection primarily involve?

A : Safeguarding APIs from unauthorized access and abuse

B : Blocking SQL injection attacks

C : Encrypting HTML content

D : Monitoring server performance

Answer: A

Question 2

Which FortiWeb configuration element is used to define rules for allowing or blocking specific types of traffic?

A : High Availability (HA)

B : Protected hostname

C : Firewall policy

D : Security profile

Answer: C

Question 3

Which is true about HTTPS on FortiWeb? (Choose three.)

A : In true transparent mode, the TLS session terminator is a protected web server.

B : In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

C : After enabling HSTS, redirects to HTTPS are no longer necessary.

D : For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

E : Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

Answer: A,B,D

Question 4

When configuring Auto TX Power control on an AP radio, which two statements best describe how the radio responds? (Choose two.)

A : When the AP detects PF Interference from an unknown source such as a cordless phone with a signal stronger that -70 dBm, it will increase its transmission power until it reaches the maximum configured TX power limit.

B : When the AP detects any other wireless signal stronger that -70 dBm, it will reduce its transmission power until it reaches the minimum configured TX power limit.

C : When the AP detects any interference from a trusted neighboring AP stronger that -70 dBm, it will reduce its transmission power until it reaches the minimum configured TX power limit.

D : When the AP detects any wireless client signal weaker than -70 dBm, it will reduce its transmission power until it reaches the maximum configured TX power limit.

Answer: B,C

Question 5

When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?

A : FortiGate public IP

B : Client real IP

C : FortiWeb IP

D : FortiGate local IP

Answer: B

Page: 1 / 21

Total 101 Questions | Updated On: May 11, 2026

Add To Cart