Question 1

Which is an example of a cross-site scripting (XSS) attack?

Accepted Answer

Correct answer: B

Question 2

Which two statements about running a vulnerability scan are true? (Choose two.)

Accepted Answer

Correct answer: AC

Question 3

Refer to the exhibit.
Attack ID20000010is brute force logins.
Which statement is accurate about the potential attack?

Accepted Answer

Correct answer: D

Question 4

Refer to the exhibit.
What is true about this FortiWeb device? (Choose two.)

Accepted Answer

Correct answer: B

Question 5

Which command will enable debugging for the FortiWeb user tracking feature?

Accepted Answer

Correct answer: B

Question 6

Refer to the exhibit.
What are two additional configuration elements that you must be configure for this API gateway? (Choose two.)

Accepted Answer

Correct answer: AB

Question 7

You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same
web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement regarding this solution is true?

Accepted Answer

Correct answer: C

Question 8

Review the following configuration:

Certshared now are offering 100% pass ensure FCP_FWB_AD-7.4 dumps!
/exam/FCP_FWB_AD-7.4/ (36 Q&As)
Which result would you expect from this configuration setting?

Accepted Answer

Correct answer: B

Question 9

What is the difference between an API gateway protection schema and a machine learning (ML) API protection schema?

Accepted Answer

Correct answer: C

Question 10

An attacker attempts to send an SQL injection attack containing the known attack string 'root'; -- through an API call.
Which FortiWeb inspection feature will be able to detect this attack the quickest?

Accepted Answer

Correct answer: B