Exam Dumps FCP_FWB_AD-7.4 Practice Free Latest Fortinet Practice Tests
FCP_FWB_AD-7.4 Exam Questions | Real FCP_FWB_AD-7.4 Practice Dumps
NEW QUESTION # 77
You are configuring FortiAnalyzer to store logs from FortiWeb.
Which is true?
- A. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
- B. To store logs from FortiWeb 6.4, on FortiAnalyzer, you must select "FrotiWeb 6.1".
- C. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.
- D. You must enable ADOMs on FortiAnalyzer.
Answer: D
NEW QUESTION # 78
Which algorithm is used to build mathematical models for bot detection?
- A. SVM
- B. SVN
- C. HMM
- D. HCM
Answer: A
NEW QUESTION # 79
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?
- A. Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.
- B. Configure a server policy that matches requests from shared Internet connections.
- C. Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.
- D. Enable SYN cookies.
Answer: D
NEW QUESTION # 80
How does caching contribute to improved application delivery performance? (Select all that apply)
- A. Enhancing data security by encrypting cached content
- B. Reducing server load by serving cached content
- C. Accelerating content delivery to end-users
- D. Automatically blocking malicious requests
Answer: B,C
NEW QUESTION # 81
How does proper API protection contribute to compliance with data privacy regulations such as GDPR?
- A. Implementing complex encryption algorithms
- B. Ensuring secure handling and transmission of user data
- C. Allowing unrestricted access to APIs
- D. Enhancing server performance
Answer: B
NEW QUESTION # 82
Refer to the exhibit.
What is true about this FortiWeb device? (Choose two.)
- A. It has 41% of the disk available for logging.
- B. It was upgraded to a different version after initial installation.
- C. It is currently running version 6.4.0.
- D. It is currently running version 6.4.1.
Answer: B
Explanation:
It was upgraded to a different version after initial installation: The device has multiple partitions with different firmware versions (6.4.0 and 6.4.1), indicating that it was upgraded after the initial installation from version 6.4.0 to 6.4.1.
NEW QUESTION # 83
Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?
- A. True Transparent Proxy
- B. Reverse-Proxy
- C. Transparent Inspection
- D. Offline Protection
Answer: C
NEW QUESTION # 84
In FortiWeb, which component is responsible for handling incoming traffic and applying security policies?
- A. Server pool
- B. FortiManager
- C. FortiGate
- D. Web Application Firewall (WAF)
Answer: D
NEW QUESTION # 85
Which two objects are required to configure a server policy in reverse proxy mode without content routing? (Choose two.)
- A. Server pool
- B. Protected hostname
- C. Site publishing
- D. Virtual server
Answer: B,D
Explanation:
Protected hostname: In reverse proxy mode, the protected hostname refers to the domain or hostname that FortiWeb will protect. It specifies which hostname FortiWeb is acting as a reverse proxy for, and is required for the server policy configuration.
Virtual server: A virtual server is a logical representation of a web server that FortiWeb handles. It's required to configure how traffic is routed to the protected resources in reverse proxy mode.
NEW QUESTION # 86
Which high availability (HA) mode uses gratuitous Address Resolution Protocol (ARP) to advertise a failover event to neighboring network devices?
- A. Active-Active
- B. Passive-Active
- C. Active-Passive
- D. Passive-Passive
Answer: C
Explanation:
In Active-Passive high availability (HA) mode, the active unit is responsible for handling traffic while the passive unit remains idle, ready to take over in case of a failure. When a failover occurs, the active unit sends out gratuitous ARP messages to notify neighboring devices about the change in the active unit's IP address. This ensures that the network devices update their ARP tables and can forward traffic to the new active unit.
NEW QUESTION # 87
Which would be a reason to implement HTTP rewriting?
- A. To replace a vulnerable element in a requested URL.
- B. To implement load balancing.
- C. To redirect HTTP to HTTPS.
- D. The original page has moved to a new URL.
Answer: C
Explanation:
HTTP rewriting is a feature in FortiWeb that allows administrators to modify HTTP requests and responses for various purposes, including security enhancements, user experience improvements, and application functionality. One common use case for HTTP rewriting is to redirect HTTP traffic to HTTPS, ensuring that all communications between clients and the server are encrypted and secure.
Explanation of Options:
A . To redirect HTTP to HTTPS: This is a valid reason to implement HTTP rewriting. By rewriting incoming HTTP requests to HTTPS, administrators can enforce secure connections, protecting data integrity and confidentiality. FortiWeb supports this functionality, allowing seamless redirection from HTTP to HTTPS.
B . To implement load balancing: Load balancing is not typically achieved through HTTP rewriting. Instead, it involves distributing network traffic across multiple servers to ensure availability and reliability. FortiWeb provides load balancing features, but these are separate from HTTP rewriting capabilities.
C . To replace a vulnerable element in a requested URL: While HTTP rewriting can modify URLs, its primary purpose is not to replace vulnerable elements within URLs. Addressing vulnerabilities typically involves input validation, sanitization, and other security measures rather than rewriting URLs.
D . The original page has moved to a new URL: This is another valid reason to implement HTTP rewriting. When a webpage's URL changes, rewriting rules can redirect requests from the old URL to the new one, ensuring users can still access the content without encountering errors.
In summary, both options A and D are correct reasons to implement HTTP rewriting. However, in the context of FortiWeb's functionalities, redirecting HTTP to HTTPS (option A) is a common and significant use case, as it enhances security by ensuring encrypted connections.
NEW QUESTION # 88
Which Layer 7 routing method does FortiWeb support?
- A. URL policy routing
- B. BGP
- C. HTTP content routing
- D. OSPF
Answer: C
Explanation:
FortiWeb is a Web Application Firewall (WAF) designed to protect web applications from various threats. Among its features, FortiWeb supports Layer 7 routing methods, which operate based on the content of the HTTP/HTTPS traffic.
HTTP Content Routing refers to the capability of directing incoming web traffic to specific backend servers based on characteristics found within the HTTP requests, such as URL paths, headers, or other content. This allows for more granular and efficient distribution of traffic, ensuring that requests are handled by the appropriate servers based on their content.
Analysis of Options:
A . URL policy routing: While this term suggests routing decisions based on URL policies, it is not a standard term used in FortiWeb's documentation. FortiWeb's content routing encompasses URL-based decisions, making this option less precise.
B . OSPF (Open Shortest Path First): This is a Layer 3 routing protocol used for IP routing within an Autonomous System. It operates at the network layer and is not related to Layer 7 routing methods.
C . BGP (Border Gateway Protocol): Another Layer 3 routing protocol, BGP is used for routing between Autonomous Systems on the internet. It does not pertain to Layer 7 or application-layer routing.
D . HTTP content routing: This aligns with FortiWeb's capabilities to make routing decisions based on the content of HTTP requests, such as URL paths, headers, or other application-layer data. This is a Layer 7 routing method supported by FortiWeb.
Therefore, the correct answer is D. HTTP content routing.
Reference:
FortiWeb 7.2.6 Administration Guide: "FortiWeb provides advanced Layer 7 load balancing and authentication offload services." cloud.orange-business.com FortiWeb Data Sheet: "FortiWeb provides advanced Layer 7 load balancing and authentication offload services." Exclusive Networks FortiWeb on OCB-FE - Installation and Deployment Guide: "FortiWeb provides advanced Layer 7 load balancing and authentication offload services." cloud.orange-business.com These references confirm that FortiWeb supports HTTP content routing as a Layer 7 routing method.
NEW QUESTION # 89
When configuring access control methods for web application users, which options should be considered for tracking and auditing user actions? (Select all that apply)
- A. Web server logs
- B. Authentication logs
- C. Error logs
- D. Session logs
Answer: A,B,D
NEW QUESTION # 90
When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B,C
NEW QUESTION # 91
When viewing the attack logs on FortiWeb, which client IP address is shown when you are using XFF header rules?
- A. FortiGate public IP
- B. FortiWeb IP
- C. FortiGate local IP
- D. Client real IP
Answer: D
NEW QUESTION # 92
A client is trying to start a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)
- A. Display an access policy message, then allow the client to continue, redirecting them to their requested page
- B. Prompt the client to authenticate
- C. Reply with a "403 Forbidden" HTTP error
- D. Allow the page access, but log the violation
- E. Automatically redirect the client to the login page
Answer: C,D,E
NEW QUESTION # 93
When configuring a wireless network for dynamic VLAN allocation, which three IETF attributes must be supplied by the radius server? (Choose three.)
- A. 81 Tunnel-Private-Group-ID
- B. 64 Tunnel-Type
- C. 65 Tunnel-Medium-Type
- D. 83 Tunnel-Preference
- E. 58 Egress-VLAN-Name
Answer: A,B,C
NEW QUESTION # 94
Under which circumstance would you not use compression on FortiWeb?
- A. When the file is too big for the FortiWeb buffer.
- B. When the server is too heavily tasked.
- C. When the client Internet connections are slow.
- D. When the available bandwidth is low.
Answer: A
NEW QUESTION # 95
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?
- A. If you are an enterprise whose computers all trust your active directory or other CA server
- B. If you are an enterprise whose resources do not need security
- C. If you are a small business or home office
- D. If you are an enterprise whose employees use only mobile devices
Answer: A
NEW QUESTION # 96
What must you do with your FortiWeb logs to ensure PCI DSS compliance?
- A. Store in an off-site location
- B. Compress them into a .zip file format
- C. Erase them every two weeks
- D. Enable masking of sensitive data
Answer: D
NEW QUESTION # 97
In which operation mode does FortiWeb offer both the ability to offload SSL as well as re-encrypt SSL?
- A. True transparent proxy
- B. Reverse proxy
- C. Offline protection
- D. Transparent inspection
Answer: B
NEW QUESTION # 98
Refer to the exhibits.
Exhibit A.
Exhibit B.
Exhibit C.
A wireless network has been installed in a small office building and is being used by a business to connect its wireless clients.
The network is used for multiple purposes, including corporate access, guest access, and connecting point-of-sale and loT devices.
Users connecting to the guest network located in the reception area are reporting slow performance.
The network administrator is reviewing the information shown in the exhibits as part of the ongoing investigation of the problem.
They show the profile used for the AP and the controller RF analysis output together with a screenshot of the GUI showing a summary of the AP and its neighboring APs.
To improve performance for the users connecting to the guest network in this area, which configuration change is most likely to improve performance?
- A. Increase the transmission power of the AP radios
- B. Install another AP in the reception area to improve available bandwidth
- C. Reduce the number of wireless networks being broadcast by the AP
- D. Enable frequency handoff on the AP to band steer clients
Answer: D
NEW QUESTION # 99
In web application security, what does API protection primarily involve?
- A. Monitoring server performance
- B. Encrypting HTML content
- C. Blocking SQL injection attacks
- D. Safeguarding APIs from unauthorized access and abuse
Answer: D
NEW QUESTION # 100
When configuring URL rewriting, what is the primary purpose of using regular expressions (regex)?
(Select all that apply)
- A. Matching and transforming specific URL patterns
- B. Blocking access to all URLs
- C. Simplifying URLs for SEO purposes
- D. Encrypting sensitive data in URLs
Answer: A,C
NEW QUESTION # 101
Refer to the exhibits.
What will happen when a client attempts a mousedown cross-site scripting (XSS) attack against the site http://my.blog.org/userl1/blog.php and FortiWeb is enforcing the highlighted signature?
- A. The connection will be allowed.
- B. The connection will be blocked as an XSS attack.
- C. FortiWeb will report the new mousedown attack to FortiGuard.
- D. The connection will be stripped of the mousedown JavaScript code.
Answer: A
Explanation:
In the provided configuration, the signature exception has been set for the URL http://my.blog.org/user1V. This means that any request to this specific URL will bypass the signature ID 01000001, which is designed to block cross-site scripting (XSS) attacks using the mousedown event. As the request comes from the URL http://my.blog.org/userl1/blog.php, which does not match the exception rule for http://my.blog.org/user1V, the attack will be allowed through.
Therefore, the connection will be allowed because the exception rule bypasses protection for the specified URL.
NEW QUESTION # 102
......
Fortinet FCP_FWB_AD-7.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
Verified FCP_FWB_AD-7.4 Exam Dumps Q&As - Provide FCP_FWB_AD-7.4 with Correct Answers: https://www.vcetorrent.com/FCP_FWB_AD-7.4-valid-vce-torrent.html
Pass Your FCP_FWB_AD-7.4 Dumps Free Latest Fortinet Practice Tests: https://drive.google.com/open?id=1YsK7qPlvxf5_SE5CKL1J_Gx1RMWVpD7J