Fortinet FCP - FortiWeb 7.4 Administrator - FCP_FWB

QUESTION NO: 1
Review the following FortiWeb CLI command: diagnose network sniffer port3 none 6 When you use this command, what is the result?

A. It shows the interface name in the output. B. It shows only TCP packets. C. It displays six packets before ending. D. It displays the MACaddress of packets.

Correct Answer: A

QUESTION NO: 2
An attacker attempts to send an SQL injection attack containing the known attack string 'root'; -- through an API call.
Which FortiWeb inspection feature will be able to detect this attack the quickest?

A. Known signatures B. ML-based API protection-threat detection C. API gateway rule D. Machine learning (ML)-based API protection-anomaly detection

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
When configuring access control methods for web application users, which options should be considered for tracking and auditing user actions? (Select all that apply)

A. Session logs B. Error logs C. Authentication logs D. Web server logs

Correct Answer: A,C,D

QUESTION NO: 4
How are bot machine learning (ML) models different from API or anomaly detection models?

A. Bot ML models do not update models periodically from new data. B. Bot ML models detect only anomalies and not actual threats. C. Bot ML models inspect more types of connection properties. D. Bot ML models analyze multiple connections overtime instead analyzing each connection as a single unit.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Where in the controller interface can you find a wireless client's upstream and downstream link rates?

A. On the controller CLI, using the diag wireless-controller wlac -d sta command B. On the AP CLI, using the cw_diag ksta command C. On the AP CLI, using the cw_diag -d sta command D. On the controller CLI, using the WiFi Client monitor

Correct Answer: B

QUESTION NO: 6
What is the primary purpose of configuring threat mitigation features in web application security?

A. Improving user interface design B. Optimizing database management C. Protecting against malicious activities and attacks D. Enhancing application performance

Correct Answer: C

QUESTION NO: 7
Which Layer 7 routing method does FortiWeb support?

A. URL policy routing B. BGP C. HTTP content routing D. OSPF

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
What must you do with your FortiWeb logs to ensure PCI DSS compliance?

A. Store in an off-site location B. Compress them into a .zip file format C. Erase them every two weeks D. Enable masking of sensitive data

Correct Answer: D

QUESTION NO: 9
Which of the following is a critical system setting that should be configured during FortiWeb deployment?

A. Email notifications B. System time synchronization C. Default web filtering policies D. DNS server settings

Correct Answer: B

QUESTION NO: 10
How does proper API protection contribute to compliance with data privacy regulations such as GDPR?

A. Enhancing server performance B. Implementing complex encryption algorithms C. Ensuring secure handling and transmission of user data D. Allowing unrestricted access to APIs

Correct Answer: C

QUESTION NO: 11
When configuring access control for a web application, which methods can be used to enforce security? (Select all that apply)

A. Role-based access control (RBAC) B. Two-factor authentication (2FA) C. Captcha verification D. IP whitelisting

Correct Answer: A,D

Fortinet FCP - FortiWeb 7.4 Administrator - FCP_FWB_AD-7.4 Exam Questions