Exam for engine

QUESTION 11
What role does FortiWeb play in ensuring PCI DSS compliance?

QUESTION 12
Which implementation is best suited for a deployment that must meet compliance criteria?

QUESTION 13
Refer to the exhibit.

There is only one administrator account configured on FortiWeb. What must an administrator do to restrict any brute force attacks that attempt to gain access to the FortiWeb management GUI?

QUESTION 14
In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

QUESTION 15
You are configuring FortiAnalyzer to store logs from FortiWeb.
Which is true?

QUESTION 16
How does FortiWeb protect against defacement attacks?

QUESTION 17
Which of the following would be a reason for implementing rewrites?

QUESTION 18
How does offloading compression to FortiWeb benefit your network?

QUESTION 19
Which statement about local user accounts is true?

QUESTION 20
In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)

QUESTION 21
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 private network LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?

QUESTION 22
What other consideration must you take into account when configuring Defacement protection

QUESTION 23
When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWeb Version critical? (Choose two)

QUESTION 24
FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)

QUESTION 25
Which three statements about HTTPS on FortiWeb are true? (Choose three.)

QUESTION 26
When the FortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate’s Real Server configuration point at?

QUESTION 27
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

QUESTION 28
A client is trying to start a session from a page that would normally be accessible only after the client has logged in.
When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

QUESTION 29
Which two statements about running a vulnerability scan are true? (Choose two.)

QUESTION 30
In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

QUESTION 31
Which algorithm is used to build mathematical models for bot detection?

QUESTION 32
You are using HTTP content routing on FortiWeb. Requests for web app A should be forwarded to a cluster of web servers which all host the same web app. Requests for web app B should be forwarded to a different, single web server.
Which is true about the solution?