Fortinet FCP_FWB_AD-7.4 - FCP - FortiWeb 7.4 Administrator Exam
Page: 3 / 13
Total 63 questions
Question #11 (Topic: Exam A)
Refer to the exhibit.
Attack ID 20000010 is brute force logins.
Which statement is accurate about the potential attack?
Attack ID 20000010 is brute force logins.
Which statement is accurate about the potential attack?
A. The attacker has successfully retrieved the credentials to www.example.com.
B. www.example.com is running attacks against the client 192.168.1.11.
C. The attack has happened 10 times.
D. 192.168.1.11 is sending suspicious traffic to FortiWeb.
Answer: D
Question #12 (Topic: Exam A)
Which three stages are part of creating a machine learning (ML) bot detection algorithm? (Choose three.)
A. Model building
B. Model running
C. Model verification
D. Sample collecting
E. Model Bayesian analysis
Answer: ACD
Question #13 (Topic: Exam A)
Under which two circumstances does FortiWeb use its own certificates? (Choose two.)
A. Connecting to browser clients using SSL
B. Making a secondary HTTPS connection to a server where FortiWeb acts as a client
C. Routing an HTTPS connection to a FortiGate
D. An administrator session connecting to the GUI using HTTPS
Answer: BD
Question #14 (Topic: Exam A)
You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement regarding this solution is true?
Which statement regarding this solution is true?
A. You must chain policies so that all requests go to the virtual server for policy A first, and then redirect requests for web application B to go to the virtual server for policy B.
B. You must create static routes on the FortiWeb to allow these requests.
C. You must put the single web server for application B into a server pool and use it with HTTP content routing.
D. The server policy always applies the same web protection profile to both web application A and web application B.
Answer: C
Question #15 (Topic: Exam A)
What can a FortiWeb administrator do if a client has been incorrectly period blocked?
A. Allow the period block to expire on its own, you cannot override it.
B. Manually release the IP address from the blocklist.
C. Disable and re-enable the server policy.
D. Force a new IP address to the client.
Answer: B
