FCP_FWB_AD-7.4最も有効な質問と解答で勉強

Fortinet FCP - FortiWeb 7.4 Administratorは業界で広く認知された資格であり、取得はキャリアの信頼性を高める確かな一歩となります。Tech4ExamのFCP_FWB_AD-7.4問題集は157問を収録し、公式の出題範囲に沿って学習を組み立てられます。

Fortinet FCP_FWB_AD-7.4 試験概要:

Fortinet FCP_FWB_AD-7.4 試験シラバストピック:

Fortinet FCP - FortiWeb 7.4 Administratorに関するよくあるご質問

Fortinet FCP - FortiWeb 7.4 Administrator 認定 FCP_FWB_AD-7.4 試験問題：

問題 #1

Which is an example of a cross-site scripting (XSS) attack?

A. SELECT username FROM accounts WHERE username='admin';-- ' AND password='password';
B. SELECT username FROM accounts WHERE username='XSS' ' AND password='alert("http://badurl.com")';
C. <img src="http://badfile/nothere" onerror=alert(document.cookie);>
D. <IMG SRC="xss.png">

問題 #2

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers. When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. The setup is breaking all connectivity and genuine clients are not able to access the servers.
What must the administrator do to avoid this problem? (Choose two.)

A. Enable the Add X-Forwarded-For setting on FortiWeb.
B. No Special configuration is required; connectivity will be re-established after the set timeout.
C. Place FortiWeb in front of FortiADC.
D. Enable the Use X-Forwarded-For setting on FortiWeb.

問題 #3

Review the following configuration:
config waf machine-learning-policy
edit 1
set sample-limit-by-ip 0
next
end
What is the expected result of this configuration setting?

A. When machine learning (ML) is in its running phase, FortiWeb will accept an unlimited number of samples from the same source IP address.
B. When machine learning (ML) is in its collecting phase, FortiWeb will not accept any samples from any source IP addresses.
C. When machine learning (ML) is in its running phase, FortiWeb will accept a set number of samples from the same source IP address.
D. When machine learning (ML) is in its collecting phase, FortiWeb will accept an unlimited number of samples from the same source IP address.

問題 #4

Examine the following code snippet:
servers:
- url: 'http://petstore.swagger.io/v1'
paths:
/pets:
get:
summary: List all pets
operationId: listPets
tags:
- pets
parameters:
- name: limit
in: query
description: How many items to return at one time (max 100)
required: true
schema:
$ref: '#/components/schemas/ref'
What is this a snippet from?

A. An API machine learning (ML) configuration file
B. An HTTP request restriction file
C. An XML schema file
D. An API schema file

問題 #5

When configuring access control methods for web application users, which options should be considered for tracking and auditing user actions? (Select all that apply)

A. Authentication logs
B. Session logs
C. Error logs
D. Web server logs

解説：