FCP_FWB_AD-7.4 Exam Questions

Which two statements accurately describe the FortiWeb machine learning (ML) feature? (Choose two.)

Which type of environment is most suited for True transparent proxy mode?

What is one of the key benefits of the FortiGuard IP reputation feature?

Which two statements about HTTPS on FortiWeb are true? (Choose two.)

When FortiWeb is enforcing client sessions with SAML authentication, which SAML role does FortiWeb play?

Refer to the exhibit, which shows SSL offloading. Which device is using the private key for the protected web server?

You have configured an authentication rule with delegation enabled on FortiWeb. What happens when a user tries to access the web application?

Which is an example of a typical SQL injection attack?

Refer to the exhibit. What is the most likely cause of this attack message?

Which configuration element defines the field names, sizes, and data types of inputs that are enforced by FortiWeb?

Which machine learning (ML) model is used for bot detection on FortiWeb?

Which two statements most accurately describe a web application firewall (WAF)? (Choose two.)

A FortiWeb is deployed behind a FortiGate configured to insert the X-Forwarded-For (XFF) header in all HTTP traffic. When you view the attack logs on FortiWeb, which source IP addr...

Refer to the exhibit, showing lines of configuration. What is this a section of?

Refer to the exhibit. Which statement about the Strictness Level for Anomaly setting is correct?

Which configuration item must be defined to start creating and enforcing a machine learning (ML) API detection policy?

Which response body type is supported for API machine learning (ML) detection?

When FortiWeb triggers a redirect action, which HTTP code does it send to the client to inform the browser of the new URL?

Which two configuration items are synchronized between two FortiWeb devices in an active- active high availability (HA) deployment? (Choose two.)

Refer to the exhibit. FortiWeb is configured to block traffic from Japan to a web application server. However, in the logs, the administrator is seeing traffic allowed from an IP a...

Refer to the exhibit. There is only one administrator account configured on FortiWeb and IPv6 is not configured on any interface. What should an administrator do to restrict any br...

What potential risk is there in using a greedy regular expression match in URL rewriting, when large amounts of content need to be matched?

What key factor must be considered when setting brute force rate limiting and blocking?

What is the main benefit of using the period block action?

Refer to the exhibits. A FortiWeb device is configured in reverse proxy mode and it is deployed downstream from a FortiGate device. Based on the configuration shown in the exhibits...