NO.73 What should you consider when troubleshooting threat detection and mitigation-related issues in a web application? (Select all that apply)

NO.74 You are deploying FortiWeb 5.6.0 in an Amazon Web Services cloud.

Which 2 lines of this initial setup via CLI are incorrect? (Choose two.)

NO.75 When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

NO.76 Which two statements about running a vulnerability scan are true? (Choose two.)

NO.77 In the context of web application security, what is the primary role of a Content Security Policy (CSP)?

NO.78 Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?

NO.79 The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

NO.80 Which FortiWeb component allows for the inspection and filtering of web traffic based on predefined security policies?

NO.81 An attacker attempts to send an SQL injection attack containing the known attack string ‘root’; — through an API call.
Which FortiWeb inspection feature will be able to detect this attack the quickest?

NO.82 Which would be a reason to implement HTTP rewriting?

NO.83 You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server.
Which is true about the solution?

NO.84 Which technology is commonly used for machine learning-based threat detection in web applications?

NO.85 What can an administrator do if a client has been incorrectly period blocked?

NO.86 When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical?
(Choose two)

NO.87 Which two statements about background rogue scanning are correct? (Choose two.)

NO.88 Which of the following is a common threat mitigation technique to protect against SQL injection attacks?

NO.89 What is a key consideration when configuring bot detection and mitigation for a web application?

NO.90 Which two objects are required to configure a server policy in reverse proxy mode without content routing? (Choose two.)

NO.91 What are two results of enabling monitor mode on FortiWeb? (Choose two.)

NO.92 Refer to the exhibits.


FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

NO.93 What capability can FortiWeb add to your Web App that your Web App may or may not already have?

NO.94 You’ve configured an authentication rule with delegation enabled on FortiWeb.
What happens when a user tries to access the web application?

NO.95 Refer to the exhibit.

A FortiWeb device is deployed upstream of a device performing source network address translation (SNAT) or load balancing.
What configuration must you perform on FortiWeb to preserve the original IP address of the client?