QUESTION 26
What key factor must be considered when setting brute force rate limiting and blocking?

QUESTION 27
How does offloading compression to FortiWeb benefit your network?

QUESTION 28
Which two statements about running a vulnerability scan are true? (Choose two.)

QUESTION 29
Which three statements about HTTPS on FortiWeb are true? (Choose three.)

QUESTION 30
How does an ADOM differ from a VDOM?

QUESTION 31
The FortiWeb machine learning (ML) feature is a two-phase analysis mechanism.
Which two functions does the first layer perform? (Choose two.)

QUESTION 32
True transparent proxy mode is best suited for use in which type of environment?

QUESTION 33
Refer to the exhibits.


FortiWeb is configured in reverse proxy mode and it is deployed downstream to FortiGate. Based on the configuration shown in the exhibits, which of the following statements is true?

QUESTION 34
In which scenario might you want to use the compression feature on FortiWeb?

QUESTION 35
Refer to the exhibit.

FortiWeb is configured to block traffic from Japan to your web application server. However, in the logs, the administrator is seeing traffic allowed from one particular IP address which is geo-located in Japan.
What can the administrator do to solve this problem? (Choose two.)

QUESTION 36
When FortiWeb triggers a redirect action, which two HTTP codes does it send to the client to inform the browser of the new URL? (Choose two.)

QUESTION 37
Which would be a reason to implement HTTP rewriting?

QUESTION 38
When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?

QUESTION 39
What role does FortiWeb play in ensuring PCI DSS compliance?

QUESTION 40
What benefit does Auto Learning provide?

QUESTION 41
Which
regex expression is the correct format for redirecting the URL http://www.example.com?

QUESTION 42
In which operation mode(s) can FortiWeb modify HTTP packets? (Choose two.)

QUESTION 43
In Reverse proxy mode, how does FortiWeb handle traffic that does not match any defined policies?

QUESTION 44
Which implementation is best suited for a deployment that must meet compliance criteria?

QUESTION 45
When is it possible to use a self-signed certificate, rather than one purchased from a commercial certificate authority?

QUESTION 46
Which two statements about the anti-defacement feature on FortiWeb are true? (Choose two.)