FCP_FWB_AD-7.4 Exam Training Practice Tests (Fortinet FCP

Question 1

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

A. Enable the Add X-Forwarded-For setting on FortiWeb. B. No Special configuration is required; connectivity will be re-established after the set timeout. C. Enable the Use X-Forwarded-For setting on FortiWeb. D. Place FortiWeb in front of FortiADC.

Correct Answer: C,D

Question 2

A customer wants to be able to index your websites for search and advertisement purposes.
What is the easiest way to allow this on a FortiWeb?

A. Add the indexer IP address to the trusted IP list on the FortiWeb. B. Add the indexer IP address to the FortiGuard "Known Search Engines" category. C. Do not allow any external sites to index your websites. D. Create a firewall rule to bypass the FortiWeb entirely for the indexer IP address.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Which factor is the best indicator of wireless client connection quality?

A. The channel utilization of the channel the client is using B. Downstream link rate, the connection rate for the AP to the client C. Upstream link rate, the connection rate for the client to the AP D. The receive signal strength (RSS) of the client at the AP

Correct Answer: C

Question 4

Refer to the exhibit.

If rule 1 matches http://bwapp.fortinet.demo, rule 2 matches http://dvwa.fortinet.demo, and the default web protection profile is the inline protection profile, which protection profile will be applied to a connection to http://petstore.fortinet.demo?

A. policy1 B. bwapp C. Inline protection profile D. dwva

Correct Answer: B

Question 5

Which two statements about background rogue scanning are correct? (Choose two.)

A. When detecting rogue APs, a dedicated radio configured for background scanning can suppress the rogue AP B. Background rogue scanning requires DARRP to be enabled on the AP instance C. A dedicated radio configured for background scanning can detect rogue devices on all other channels in its configured frequency band. D. A dedicated radio configured for background scanning can support the connection of wireless clients

Correct Answer: B,D

Question 6

When user tracking is configured, how does FortiWeb identify which users to track?

A. FortiWeb tracks only users logged in during an attack. B. FortiWeb tracks only users that have logged in successfully. C. FortiWeb tracks only users identified by FortiWeb admin. D. FortiWeb tracks admin users.

Correct Answer: B

Question 7

Which two functions does the first layer of the FortiWeb anomaly machine learning (ML) analysis mechanism perform? (Choose two.)

A. Determines a probability model behind every parameter and HTTP method passing through FortiWeb B. Determines whether traffic is an anomaly, based on observable features overtime C. Determines whether an anomaly is a real attack or just a harmless anomaly that should be ignored D. Determines if a detected threat is a false-positive or not

Correct Answer: A,B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

You've configured an authentication rule with delegation enabled on FortiWeb.
What happens when a user tries to access the web application?

A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app B. FortiWeb replies with a HTTP challenge of behalf of the server, the if the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app C. ForitWeb redirects the user to the web app's authentication page D. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully

Correct Answer: A

Question 9

What is the primary purpose of a Content Security Policy (CSP) in web application security? (Select all that apply)

A. Mitigating SQL injection attacks B. Controlling the sources of content that a web page can load C. Preventing cross-site scripting (XSS) attacks D. Enforcing strong password policies

Correct Answer: B,C

Fortinet FCP - FortiWeb 7.4 Administrator - FCP_FWB_AD-7.4 Exam Practice Test