Confidently Practice Online with Free FCP_FWB_AD-7.4 Exam Cram

Practice your Fortinet NSE 5 - FortiWeb 7.4 Administrator certification test with free FCP_FWB_AD-7.4 exam cram and take control of your certification preparation. At FreeExamCram, you can practice online for free using real FCP_FWB_AD-7.4 exam dumps, verified questions, and expert-designed free online practice tests. Moreover our Fortinet FCP_FWB_AD-7.4 exam cram backed by our confidence-boosting refund guarantee.

Question 1

Which of the following is a common attack vector that API protection aims to mitigate?

Options :

A : Unauthorized access to APIs

B : Distributed Denial of Service (DDoS) attacks

C : SQL injection attacks

D : Cross-site scripting (XSS) attacks

Answer: A

Question 2

When configuring protected hostnames in FortiWeb, what is their primary purpose?

Options :

A : Defining NAT policies

B : Redirecting traffic to a specific URL

C : Identifying internal network resources

D : Blocking outgoing traffic

Answer: C

Question 3

A client is trying to start a session from a page that should normally be accessible only after they have logged in.When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Options :

A : Reply with a "403 Forbidden" HTTP error

B : Allow the page access, but log the violation

C : Prompt the client to authenticate

D : Display an access policy message, then allow the client to continue, redirecting them to their requested page

E : Automatically redirect the client to the login page

Answer: A,B,E

Question 4

An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.What FortiWeb feature should you configure?

Options :

A : Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.

B : Enable SYN cookies.

C : Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client-s private network IP, and to block attacks using that.

D : Configure a server policy that matches requests from shared Internet connections.

Answer: B

Question 5

In FortiWeb, which component is responsible for handling incoming traffic and applying security policies?

Options :

A : FortiGate

B : FortiManager

C : Server pool

D : Web Application Firewall (WAF)

Answer: D