Question 1

Which is true about HTTPS on FortiWeb? (Choose three.)

Options :

A : In true transparent mode, the TLS session terminator is a protected web server.

B : In transparent inspection mode, you select which certificate that FortiWeb will present in the server pool, not in the server policy.

C : After enabling HSTS, redirects to HTTPS are no longer necessary.

D : For SNI, you select the certificate that FortiWeb will present in the server pool, not in the server policy.

E : Enabling RC4 protects against the BEAST attack, but is not recommended if you configure FortiWeb to only offer TLS 1.2.

Answer: A,B,D

Question 2

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.What FortiWeb feature should you configure?

Options :

A : Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

B : Enable SYN cookies.

C : Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client-s private network IP, and to block attacks using that.

D : Configure a server policy that matches requests from shared Internet connections.

Answer: B

Question 3

In web application security, what does API protection primarily involve?

Options :

A : Safeguarding APIs from unauthorized access and abuse

B : Blocking SQL injection attacks

C : Encrypting HTML content

D : Monitoring server performance

Answer: A

Question 4

Which FortiWeb configuration element is used to define rules for allowing or blocking specific types of traffic?

Options :

A : High Availability (HA)

B : Protected hostname

C : Firewall policy

D : Security profile

Answer: C

Question 5

Which regex expression is the correct format for redirecting the URL http://www.example.com?

Options :

A : www/.example/.com

B : www.example.com

C : www\example\com

D : www\.example\.com

Answer: B

Higher Test Marks with Free Online FCP_FWB_AD-7.4 Exam Practice

Buying Options: