Fortinet FCP_FWB_AD-7.4 Practice Exams
Last updated on Oct 21,2026- Exam Code: FCP_FWB_AD-7.4
- Exam Name: FCP - FortiWeb 7.4 Administrator
- Certification Provider: Fortinet
- Latest update: Oct 21,2026
When configuring access control methods for web application users, which options should be considered for tracking and auditing user actions? (Select all that apply)
- A . Session logs
- B . Authentication logs
- C . Web server logs
- D . Error logs
In which two ways does FortiWeb handle traffic that does not match any defined policies? (Choose two.)
- A . In reverse-proxy mode, the traffic is denied.
- B . In transparent mode, the traffic is passed through.
- C . In true transparent mode, ip-forward should be enabled to deny the traffic.
- D . In offline protection mode, the traffic is dropped with a TCP reset.
What is the purpose of using Web Application Firewalls (WAFs) in the context of web application security? (Select all that apply)
- A . Preventing SQL injection attacks
- B . Protecting against DDoS attacks
- C . Enforcing secure authentication
- D . Optimizing website performance
When configuring URL rewriting, what is the primary purpose of using regular expressions (regex)? (Select all that apply)
- A . Matching and transforming specific URL patterns
- B . Encrypting sensitive data in URLs
- C . Blocking access to all URLs
- D . Simplifying URLs for SEO purposes
Which of the following FortiWeb features is part of the mitigation tools against OWASP A4 threats?
- A . Sensitive info masking
- B . Session Management
- C . Poison Cookie detection
- D . Brute Force blocking
Which of the following steps is essential for troubleshooting deployment and system-related issues in FortiWeb?
- A . Clearing browser cache
- B . Disabling firewall policies
- C . Collecting logs and diagnostic information
- D . Increasing server pool capacity
When configuring protected hostnames in FortiWeb, what is their primary purpose?
- A . Identifying internal network resources
- B . Redirecting traffic to a specific URL
- C . Blocking outgoing traffic
- D . Defining NAT policies
How can you mitigate attacks on authentication processes in a web application? (Select all that apply)
- A . Implement multi-factor authentication (MFA)
- B . Use secure password hashing algorithms
- C . Disable all authentication mechanisms
- D . Implement account lockout policies
Which encryption algorithm is commonly used to secure data transmission over HTTPS connections? (Select all that apply)
- A . AES (Advanced Encryption Standard)
- B . RSA (RivestCShamirCAdleman)
- C . DES (Data Encryption Standard)
- D . SHA-1 (Secure Hash Algorithm 1)
Which of the following are common reasons for configuring HTTP redirection in application delivery? (Select all that apply)
- A . Load balancing traffic
- B . Enforcing HTTPS for secure communication
- C . Redirecting users to a different website
- D . Blocking specific IP addresses