100%合格率リアルFCP_FWB_AD-7.4試験成功を掴み取れ！[2025年07月]
Fortinet FCP_FWB_AD-7.4のPDF問題格別な練習FCP - FortiWeb 7.4 Administrator
質問 # 94
Which FortiWeb component allows for the inspection and filtering of web traffic based on predefined security policies?
- A. Content Delivery Network (CDN)
- B. Application Delivery Controller (ADC)
- C. Secure Sockets Layer (SSL) Offloading
- D. Web Application Firewall (WAF)
正解：D
質問 # 95
How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?
- A. No special configuration required
- B. You must enable the "Use" X-Forwarded-For: option.
- C. FortiWeb must be set for Transparent Mode
- D. You must enable "Add" X-Forwarded-For: instead of the "Use" X-Forwarded-For: option.
正解：D
質問 # 96
Which would be a reason to implement HTTP rewriting?
- A. To implement load balancing.
- B. To redirect HTTP to HTTPS.
- C. To replace a vulnerable element in a requested URL.
- D. The original page has moved to a new URL.
正解：B
解説：
HTTP rewriting is a feature in FortiWeb that allows administrators to modify HTTP requests and responses for various purposes, including security enhancements, user experience improvements, and application functionality. One common use case for HTTP rewriting is to redirect HTTP traffic to HTTPS, ensuring that all communications between clients and the server are encrypted and secure.
Explanation of Options:
A . To redirect HTTP to HTTPS: This is a valid reason to implement HTTP rewriting. By rewriting incoming HTTP requests to HTTPS, administrators can enforce secure connections, protecting data integrity and confidentiality. FortiWeb supports this functionality, allowing seamless redirection from HTTP to HTTPS.
B . To implement load balancing: Load balancing is not typically achieved through HTTP rewriting. Instead, it involves distributing network traffic across multiple servers to ensure availability and reliability. FortiWeb provides load balancing features, but these are separate from HTTP rewriting capabilities.
C . To replace a vulnerable element in a requested URL: While HTTP rewriting can modify URLs, its primary purpose is not to replace vulnerable elements within URLs. Addressing vulnerabilities typically involves input validation, sanitization, and other security measures rather than rewriting URLs.
D . The original page has moved to a new URL: This is another valid reason to implement HTTP rewriting. When a webpage's URL changes, rewriting rules can redirect requests from the old URL to the new one, ensuring users can still access the content without encountering errors.
In summary, both options A and D are correct reasons to implement HTTP rewriting. However, in the context of FortiWeb's functionalities, redirecting HTTP to HTTPS (option A) is a common and significant use case, as it enhances security by ensuring encrypted connections.
質問 # 97
Which technology is commonly used for machine learning-based threat detection in web applications?
- A. Virtual Private Network (VPN)
- B. Artificial Intelligence (AI)
- C. Blockchain
- D. Internet of Things (IoT)
正解：B
質問 # 98
Which of the following are common reasons for configuring HTTP redirection in application delivery?
(Select all that apply)
- A. Enforcing HTTPS for secure communication
- B. Redirecting users to a different website
- C. Load balancing traffic
- D. Blocking specific IP addresses
正解：A、B
質問 # 99
How does bot detection and mitigation contribute to web application security?
- A. Authenticating API requests
- B. Identifying and blocking malicious automated activities
- C. Encrypting user data during login
- D. Optimizing database queries
正解：B
質問 # 100
Where in the controller interface can you find a wireless client's upstream and downstream link rates?
- A. On the AP CLI, using the cw_diag -d sta command
- B. On the AP CLI, using the cw_diag ksta command
- C. On the controller CLI, using the diag wireless-controller wlac -d sta command
- D. On the controller CLI, using the WiFi Client monitor
正解：B
質問 # 101
What is the primary purpose of URL rewriting in application delivery? (Select all that apply)
- A. Improving search engine optimization (SEO)
- B. Preventing access to specific web pages
- C. Simplifying and optimizing URLs for users
- D. Enhancing security by obfuscating URLs
正解：A、C
質問 # 102
Refer to the exhibit.
What are two additional configuration elements that you must be configure for this API gateway? (Choose two.)
- A. You must select a setting in the Allow User Group field.
- B. You must enable and configure Host Status.
- C. You must define rate limits.
- D. You must define URL prefixes.
正解：C、D
解説：
When configuring an API Gateway on a FortiWeb appliance, it's essential to include specific elements to ensure proper functionality and security. Two critical configuration elements are:
Defining Rate Limits:
Implementing rate limits is crucial to control the number of requests a client can make to the API within a specified timeframe. This helps prevent abuse, such as denial-of-service attacks, by limiting excessive requests from clients.
Defining URL Prefixes:
Specifying URL prefixes allows the FortiWeb appliance to identify and manage API requests accurately. By defining these prefixes, the appliance can route and process API calls correctly, ensuring that only legitimate traffic reaches the backend services.
These configurations align with Fortinet's best practices for setting up an API Gateway policy. While the exact steps may vary depending on the FortiWeb firmware version, the general process involves navigating to the Web Application Firewall section, selecting the API Gateway Policy tab, and configuring the necessary parameters, including rate limits and URL prefixes.
質問 # 103
Which of the following is a critical system setting that should be configured during FortiWeb deployment?
- A. Default web filtering policies
- B. System time synchronization
- C. DNS server settings
- D. Email notifications
正解：B
質問 # 104
Refer to the exhibit.
If rule 1 matches http://bwapp.fortinet.demo, rule 2 matches http://dvwa.fortinet.demo, and the default web protection profile is the inline protection profile, which protection profile will be applied to a connection to http://petstore.fortinet.demo?
- A. policy1
- B. bwapp
- C. dwva
- D. Inline protection profile
正解：B
質問 # 105
Under which circumstance would you not use compression on FortiWeb?
- A. When the client Internet connections are slow.
- B. When the server is too heavily tasked.
- C. When the file is too big for the FortiWeb buffer.
- D. When the available bandwidth is low.
正解：C
質問 # 106
An attacker attempts to send an SQL injection attack containing the known attack string 'root'; -- through an API call.
Which FortiWeb inspection feature will be able to detect this attack the quickest?
- A. API gateway rule
- B. Machine learning (ML)-based API protection-anomaly detection
- C. ML-based API protection-threat detection
- D. Known signatures
正解：D
解説：
The quickest detection for an SQL injection attack like the one described ('root'; --) would be through known signatures. FortiWeb utilizes signature-based detection to match incoming traffic against predefined attack patterns. Since SQL injection attacks are commonly known and have specific patterns (such as 'root'; --), known signatures would immediately recognize and flag this type of attack.
質問 # 107
In web application security, what does API protection primarily involve?
- A. Encrypting HTML content
- B. Monitoring server performance
- C. Blocking SQL injection attacks
- D. Safeguarding APIs from unauthorized access and abuse
正解：D
質問 # 108
What is one of the key benefits of the FortiGuard IP reputation feature?
- A. It is updated once per year.
- B. It provides a document of IP addresses that are suspect, so that administrators can manually update their blacklists.
- C. It maintains a list of public IPs with a bad reputation for participating in attacks.
- D. It maintains a list of private IP addresses.
正解：C
質問 # 109
When configuring HTTP content routing, which factors should be considered for routing decisions?
(Select all that apply)
- A. Source IP address
- B. User-agent header
- C. HTTP request method
- D. Destination port number
正解：B、C
質問 # 110
How does proper API protection contribute to compliance with data privacy regulations such as GDPR?
- A. Enhancing server performance
- B. Allowing unrestricted access to APIs
- C. Ensuring secure handling and transmission of user data
- D. Implementing complex encryption algorithms
正解：C
質問 # 111
Which algorithm is used to build mathematical models for bot detection?
- A. SVN
- B. HCM
- C. HMM
- D. SVM
正解：D
質問 # 112
What is an advantage of utilizing machine learning for web application security compared to rule- based approaches?
- A. Faster response time to threats
- B. Adaptability to evolving attack patterns
- C. Lower computational resource utilization
- D. Simplicity in configuration and management
正解：B
質問 # 113
Refer to the exhibit.
Attack ID 20000010 is brute force logins.
Which statement is accurate about the potential attack?
- A. 192.168.1.11 is sending suspicious traffic to FortiWeb.
- B. www.example.com is running attacks against the client 192.168.1.11.
- C. The attack has happened 10 times.
- D. The attacker has successfully retrieved the credentials to www.example.com.
正解：A
解説：
The Attack ID of 20000010 refers to a brute force login attempt, which typically indicates that the client IP (192.168.1.11) is sending suspicious or malicious traffic to the FortiWeb. FortiWeb detected and blocked this suspicious activity, which is why the page is shown as blocked.
質問 # 114
Which implementation is best suited for a deployment that must meet compliance criteria?
- A. SSL Offloading with FortiWeb in reverse proxy mode
- B. SSL Inspection with FortiWeb in Transparency mode
- C. SSL Offloading with FortiWeb in Transparency Mode
- D. SSL Inspection with FrotiWeb in Reverse Proxy mode
正解：D
質問 # 115
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?
- A. Configure a server policy that matches requests from shared Internet connections.
- B. Enable SYN cookies.
- C. Configure FortiWeb to use ''X-Forwarded-For:'' headers to find each client's private network IP, and to block attacks using that.
- D. Enable ''Shared IP'' and configure the separate rate limits for requests from NATted source IPs.
正解：B
質問 # 116
When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)
- A. 0
- B. 1
- C. 2
- D. 3
正解：B、C
質問 # 117
During FortiWeb deployment, which feature can be used to protect against Distributed Denial of Service (DDoS) attacks?
- A. Load balancing
- B. Server pools
- C. Rate limiting
- D. Intrusion Prevention System (IPS)
正解：C
質問 # 118
......
FCP_FWB_AD-7.4問題集Fast2test100%合格率保証：https://jp.fast2test.com/FCP_FWB_AD-7.4-premium-file.html