Fortinet FCP_FWB_AD-7.4 - FCP - FortiWeb 7.4 Administrator Exam
Page: 2 / 8
Total 36 questions
Question #6 (Topic: Exam A)
What is the difference between an API gateway protection schema and a machine learning (ML) API protection schema?
A. An API gateway protection schema does not allow authentication.
B. An API gateway protection schema handles response bodies.
C. An API gateway protection schema supports data types other than string.
D. An API gateway protection schema cannot change without administrator intervention.
Answer: D
Question #7 (Topic: Exam A)
Refer to the exhibits.
What will happen when a client attempts a mousedown cross-site scripting (XSS) attack against the site http://my.blog.org/userl1/blog.php and FortiWeb is enforcing the highlighted signature?
What will happen when a client attempts a mousedown cross-site scripting (XSS) attack against the site http://my.blog.org/userl1/blog.php and FortiWeb is enforcing the highlighted signature?
A. The connection will be stripped of the mousedown JavaScript code.
B. The connection will be blocked as an XSS attack.
C. FortiWeb will report the new mousedown attack to FortiGuard.
D. The connection will be allowed.
Answer: D
Question #8 (Topic: Exam A)
Which high availability mode is commonly used to integrate with a traffic distributer like FortiADC?
A. Cold standby
B. Load sharing
C. Active-Active
D. Active-Passive
Answer: C
Question #9 (Topic: Exam A)
A customer wants to be able to index your websites for search and advertisement purposes.
What is the easiest way to allow this on a FortiWeb?
What is the easiest way to allow this on a FortiWeb?
A. Add the indexer IP address to the trusted IP list on the FortiWeb.
B. Add the indexer IP address to the FortiGuard "Known Search Engines" category.
C. Create a firewall rule to bypass the FortiWeb entirely for the indexer IP address.
D. Do not allow any external sites to index your websites.
Answer: A
Question #10 (Topic: Exam A)
Refer to the exhibit.
A FortiWeb device is deployed upstream of a device performing source network address translation (SNAT) or load balancing.
What configuration must you perform on FortiWeb to preserve the original IP address of the client?
A FortiWeb device is deployed upstream of a device performing source network address translation (SNAT) or load balancing.
What configuration must you perform on FortiWeb to preserve the original IP address of the client?
A. Enable and configure the Preserve Client IP setting.
B. Use a transparent operating mode on FortiWeb.
C. Enable and configure the Add X-Forwarded-For setting.
D. Turn off NAT on the FortiWeb.
Answer: A
