[Q43-Q61] Updated Feb-2026 Exam Engine or PDF for the Fortinet FCP_FWB_AD-7.4 test to help you quickly prepare for the Fortinet exam!

5/5 - (3 votes)

Updated Feb-2026 Test Engine or PDF for the Fortinet FCP_FWB_AD-7.4 test to help you quickly prepare for the Fortinet exam!

Full FCP_FWB_AD-7.4 Practice Test and 157 unique questions with explanations waiting just for you, get it now!

Q43. Refer to the exhibits.

What will happen when a client attempts a mousedown cross-site scripting (XSS) attack against the site http://my.blog.org/userl1/blog.php and FortiWeb is enforcing the highlighted signature?

The connection will be stripped of the mousedown JavaScript code.

The connection will be blocked as an XSS attack.

FortiWeb will report the new mousedown attack to FortiGuard.

The connection will be allowed.

Q44. What is a key consideration when configuring bot detection and mitigation for a web application?

Identifying legitimate user traffic

Increasing server response time

Allowing unrestricted access to APIs

Implementing weaker authentication mechanisms

Q45. Review the following configuration:
config waf machine-learning-policy
edit 1
set sample-limit-by-ip 0
next
end
What is the expected result of this configuration setting?

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.

When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

Q46. Review the following configuration:

Which result would you expect from this configuration setting?

When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.

When ML is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When ML is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

When ML is in its collecting phase, FortiWeb will not accept any samples from any IP addresses.

Q47. Which high availability mode is commonly used to integrate with a traffic distributer like FortiADC?

Cold standby

Load sharing

Active-Active

Active-Passive

Q48. What is the purpose of configuring server pools in FortiWeb?

Load balancing traffic

Blocking malicious IPs

Managing user authentication

Monitoring system health

Q49. When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

404

301

403

302

Q50. Which two statements about running a vulnerability scan are true? (Choose two.)

You should run the vulnerability scan during a maintenance window.

You should run the vulnerability scan multiple times so it can automatically update the scan parameters.

You should run the vulnerability scan in a test environment.

You should run the vulnerability scan on the live website to get accurate results.

Q51. Which implementation is most suited for a deployment that must meet PCI DSS compliance criteria?

SSL offloading with FortiWeb in reverse proxy mode

SSL offloading with FortiWeb in PCI DSS mode

SSL offloading with FortiWeb in transparency mode

SSL offloading with FortiWeb in full transparent proxy mode

Q52. You are deploying FortiWeb 5.6.0 in an Amazon Web Services cloud.

Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

Q53. During FortiWeb deployment, which feature can be used to protect against Distributed Denial of Service (DDoS) attacks?

Server pools

Intrusion Prevention System (IPS)

Load balancing

Rate limiting

Q54. Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?

Offline Protection

Transparent Inspection

True Transparent Proxy

Reverse-Proxy

Q55. What are two results of enabling monitor mode on FortiWeb? (Choose two.)

It does not affect denial-of-service (DoS) protection profile actions to rate limit traffic.

It uses the default action for all profiles and, depending on the configuration, blocks or allows traffic.

It does not affect any HTML rewriting or redirection actions in web protection profiles.

It overrides all usual profile actions. FortiWeb accepts all requests and generates alert email or log messages only for violations.

Q56. When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate’s Real Server configuration point at?

IP Address of the Virtual Server on the FortiWeb

Virtual Server IP on the FortiGate

Server’s real IP

FortiWeb’s real IP

Q57. Which three statements about HTTPS on FortiWeb are true? (Choose three.)

For TLS inspection, you must upload the server certificate and key to FortiWeb.

In transparent inspection mode, FortiWeb supports the same cipher suites as reverse proxy mode.

In reverse proxy mode, FortiWeb can re-encrypt connections to the protected web servers.

You can choose which SSL/TLS protocol versions are supported by FortiWeb when clients connect to a virtual server.

Q58. Which of the following is a common threat mitigation technique to protect against SQL injection attacks?

Input validation and sanitization

Data encryption at rest

Cross-site scripting (XSS) prevention

Server load balancing

Q59. Which two FortiWeb operation modes support machine learning? (Choose two.)

Transparent proxy

Offline protection

True transparent proxy

Reverse proxy

Q60. When configuring access control for a web application, which methods can be used to enforce security? (Select all that apply)

Role-based access control (RBAC)

Two-factor authentication (2FA)

Captcha verification

IP whitelisting

Q61. Which factor is the best indicator of wireless client connection quality?

Downstream link rate, the connection rate for the AP to the client

The receive signal strength (RSS) of the client at the AP

Upstream link rate, the connection rate for the client to the AP

The channel utilization of the channel the client is using

Full FCP_FWB_AD-7.4 Practice Test and 157 unique questions with explanations waiting just for you, get it now: https://www.passleadervce.com/Public-Cloud-Security/reliable-FCP_FWB_AD-7.4-exam-learning-guide.html

Leave a Reply Cancel reply