FCP_FWB_AD-7.4 Exam PDF [2026] Tests Free Updated Today with Correct 157 Questions [Q44-Q61]

QUESTION 44
Which of the following are common reasons for configuring HTTP redirection in application delivery?
(Select all that apply)

QUESTION 45
When configuring access control for a web application, which methods can be used to enforce security? (Select all that apply)

QUESTION 46
What are two results of enabling monitor mode on FortiWeb? (Choose two.)

QUESTION 47
Which two items can be defined in a FortiWeb XML Protection Rule? (Choose two.)

QUESTION 48
When configuring threat mitigation features for a web application, what is the primary purpose of rate limiting?

QUESTION 49
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

QUESTION 50
A client is trying to start a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

QUESTION 51
Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

QUESTION 52
Review the following configuration:

Which result would you expect from this configuration setting?

QUESTION 53
How does your FortiWeb configuration differ if the FortiWeb is upstream of the SNAT device instead of downstream of the SNAT device?

QUESTION 54
Which of the following steps is essential for troubleshooting deployment and system-related issues in FortiWeb?

QUESTION 55
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

QUESTION 56
In FortiWeb, which component is responsible for handling incoming traffic and applying security policies?

QUESTION 57
Which of the following is a common threat mitigation technique to protect against SQL injection attacks?

QUESTION 58
In the context of web application security, what is the primary role of a Content Security Policy (CSP)?

QUESTION 59
Under which circumstances does FortiWeb use its own certificates? (Choose Two)

QUESTION 60
How can you mitigate attacks on authentication processes in a web application? (Select all that apply)

QUESTION 61
You’ve configured an authentication rule with delegation enabled on FortiWeb.
What happens when a user tries to access the web application?