QUESTION 32
You’ve configured an authentication rule with delegation enabled on FortiWeb.
What happens when a user tries to access the web application?

QUESTION 33
FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

QUESTION 34
Refer to the exhibit.

There is only one administrator account configured on FortiWeb. What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?

QUESTION 35
Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)

QUESTION 36
Refer to the exhibit.

Based on the configuration, what would happen if this FortiWeb were to lose power? (Choose two.)

QUESTION 37
Under what circumstances would you want to use the temporary uncompress feature of FortiWeb?

QUESTION 38
When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

QUESTION 39
A client is trying to start a session from a page that should normally be accessible only after they have logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

QUESTION 40
Which operation mode does not require additional configuration in order to allow FTP traffic to your web server?

QUESTION 41
How does offloading compression to FortiWeb benefit your network?

QUESTION 42
What must you do with your FortiWeb logs to ensure PCI DSS compliance?

QUESTION 43
What is one of the key benefits of the FortiGuard IP reputation feature?

QUESTION 44
How does an ADOM differ from a VDOM?

QUESTION 45
Which two statements about running a vulnerability scan are true? (Choose two.)

QUESTION 46
Which three statements about HTTPS on FortiWeb are true? (Choose three.)

QUESTION 47
Refer to the exhibit.

Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate.
What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

QUESTION 48
When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

QUESTION 49
What role does FortiWeb play in ensuring PCI DSS compliance?

QUESTION 50
What key factor must be considered when setting brute force rate limiting and blocking?

QUESTION 51
In which scenario might you want to use the compression feature on FortiWeb?

QUESTION 52
You are using HTTP content routing on FortiWeb. You want requests for web application A to be forwarded to a cluster of web servers, which all host the same web application. You want requests for web application B to be forwarded to a different, single web server.
Which statement about this solution is true?

QUESTION 53
Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)