FCP_FWB_AD-7.4 Free Practice Test

In SAML deployments, which server contains user authentication credentials (username/password)?

1. A. Identity provider
2. B. Service provider
3. C. User database
4. D. Authentication client

Correct Answer: A

Which two items can be defined in a FortiWeb XML Protection Rule? (Choose two.)

1. A. API key
2. B. IXML Schema
3. C. Web protection profile
4. D. Request URL

Correct Answer: BD

You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement regarding this solution is true?

1. A. You must chain policies so that all requests go to the virtual server for policy A first, and then redirect requests for web application B to go to the virtual server for policy B
2. B. You must create static routes on the FortiWebto allow these requests.
3. C. You must put the single web server for application B into a server pool and use it with HTTP content routing.
4. D. The server policy always applies the same web protection profile to both web application A and web application B.

Correct Answer: C

Review the following configuration:

Which result would you expect from this configuration setting?

1. A. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.
2. B. When ML is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
3. C. When ML is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
4. D. When ML is in its collecting phase, FortiWeb will not accept any samples from any IP addresses.

Correct Answer: B

Which two functions does the first layer of the FortiWeb anomaly machine learning (ML) analysis mechanism perform? (Choose two.)

1. A. Determines whether an anomaly is a real attack or just a harmless anomaly that should be ignored
2. B. Determines a probability model behind every parameter and HTTP method passing through FortiWeb
3. C. Determines whether traffic is an anomaly, based on observable features overtime
4. D. Determines if a detected threat is a false-positive or not

Correct Answer: BC