NEW QUESTION 1
An e-commerce web app is used by small businesses. Clients often access it from offices behind a router, where clients are on an IPv4 privatenetwork LAN. You need to protect the web application from denial of service attacks that use request floods.
What FortiWeb feature should you configure?

• A. Enable “Shared IP” and configure the separate rate limits for requests from NATted source IPs.
• B. Configure FortiWeb to use “X-Forwarded-For:” headers to find each client’s private network IP, and to block attacks using that.
• C. Enable SYN cookies.
• D. Configure a server policy that matches requests from shared Internet connections.

Answer: C

NEW QUESTION 2
When viewing the attack logs on your FortiWeb, which IP Address is shown for the client when using XFF Header rules?

• A. FortiGate’s public IP
• B. FortiGate’s local IP
• C. FortiWeb’s IP
• D. Client’s real IP

Answer: D

NEW QUESTION 3
You’ve configured an authentication rule with delegation enabled on FortiWeb. Whathappens when a user tries to access the web application?

• A. FrotiWeb redirects users to a FortiAuthenticator page, then if the user authenticates successfully, FortiGate signals to FortiWeb to allow access to the web app
• B. ForitWeb redirects the user tothe web app’s authentication page
• C. FortiWeb forwards the HTTP challenge from the server to the client, then monitors the reply, allowing access if the user authenticates successfully
• D. FortiWeb replies with a HTTP challenge of behalf of the server, theif the user authenticates successfully, FortiWeb allows the request and also includes credentials in the request that it forwards to the web app

Answer: A

NEW QUESTION 4
When integrating FortiWeb and FortiAnalyzer, why is the selection for FortiWebVersion critical? (Choose two)

• A. Defines Log file format
• B. Defines communication protocol
• C. Defines Database Schema
• D. Defines Log storage location

Answer: AD

NEW QUESTION 5
What is one of the key benefits of the FortiGuard IP Reputation feature?

• A. FortiGuard maintains a list of public IPs with a bad reputation for participating in attacks.
• B. It is updated once per year
• C. Provides a Document of IP addresses that are suspect, so that administrators can manually update their blacklists
• D. It maintains a list of private IP addresses

Answer: A

NEW QUESTION 6
In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

• A. Non-matching traffic is allowed
• B. non-Matching traffic is held in buffer
• C. Non-matching traffic is Denied
• D. Non-matching traffic is rerouted to FortiGate

Answer: C

NEW QUESTION 7
When theFortiWeb is configured in Reverse Proxy mode and the FortiGate is configured as an SNAT device, what IP address will the FortiGate’s Real Server configuration point at?

• A. Virtual Server IP on the FortiGate
• B. Server’s real IP
• C. FortiWeb’s real IP
• D. IPAddress of the Virtual Server on the FortiWeb

Answer: A

NEW QUESTION 8
Which implementation is bestsuited for a deployment that must meet compliance criteria?

• A. SSL Inspection with FortiWeb in Transparency mode
• B. SSL Offloading with FortiWeb in reverse proxy mode
• C. SSL Inspection with FrotiWeb in Reverse Proxy mode
• D. SSL Offloading with FortiWeb inTransparency Mode

Answer: C

NEW QUESTION 9
......