Fortinet FCP_FWB_AD-7.4 Practice Exams
Last updated on Oct 21,2026- Exam Code: FCP_FWB_AD-7.4
- Exam Name: FCP - FortiWeb 7.4 Administrator
- Certification Provider: Fortinet
- Latest update: Oct 21,2026
Which factor is the best indicator of wireless client connection quality?
- A . Downstream link rate, the connection rate for the AP to the client
- B . The receive signal strength (RSS) of the client at the AP
- C . Upstream link rate, the connection rate for the client to the AP
- D . The channel utilization of the channel the client is using
In the context of web application security, what is the primary role of a Content Security Policy (CSP)?
- A . Preventing SQL injection attacks
- B . Controlling the sources of content that a web page can load
- C . Detecting malicious JavaScript code
- D . Encrypting data at rest
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)
- A . Determines whether an anomaly is a real attack or just a benign anomaly that should be ignored
- B . Builds a threat model behind every parameter and HTTP method
- C . Determines if a detected threat is a false-positive or not
- D . Determines whether traffic is an anomaly, based on observed application traffic over time
Which of the following is a common challenge when implementing bot mitigation techniques?
- A . Incompatibility with web browsers
- B . Difficulty in distinguishing between legitimate and malicious bots
- C . Increased server response times
- D . Lack of support for mobile devices
How does bot detection and mitigation contribute to web application security?
- A . Identifying and blocking malicious automated activities
- B . Encrypting user data during login
- C . Optimizing database queries
- D . Authenticating API requests
When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)
- A . 404
- B . 301
- C . 403
- D . 302
What must you configure on FortiWeb to prevent cross-origin resource sharing (CORS) attacks?
- A . Blocklist client IP addresses.
- B . Configure a CORS parameter in DNS.
- C . Configure an allowed origin domain.
- D . Disable CORS in the web protection profile.
What is the primary purpose of URL rewriting in application delivery? (Select all that apply)
- A . Enhancing security by obfuscating URLs
- B . Improving search engine optimization (SEO)
- C . Simplifying and optimizing URLs for users
- D . Preventing access to specific web pages
What is the primary function of configuring FortiWeb HA (High Availability)?
- A . Load balancing traffic
- B . Ensuring system redundancy and failover
- C . Blocking malicious IPs
- D . Managing server pools
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?
- A . If you are an enterprise whose employees use only mobile devices
- B . If you are a small business or home office
- C . If you are an enterprise whose resources do not need security
- D . If you are an enterprise whose computers all trust your active directory or other CA server