Which two actions can FortiWeb take when an attack signature is matched, depending on the configured action? (Choose two.)

• A.Alert only
• B.Deny (block) the request
• C.Automatically patch the back-end server code
• D.Modify DNS records

Comment: *

Name: *

Email: *

Verification: *

An organization wants FortiWeb to publish an internal application to remote users without requiring a traditional VPN client, using identity-aware access enforcement. Which FortiWeb feature supports this use case?

• A.Zero trust network access (ZTNA) / site publishing
• B.WCCP redirection
• C.Static NAT
• D.HA heartbeat interface

Comment: *

Name: *

Email: *

Verification: *

You are reviewing a report from your FortiWeb logs and notice a JavaScript payload like < script > document.
cookie < /script > is submitted through a product review form. The page doesn't filter the script, and when users view the review, their session cookies are exposed.
Why is this attack dangerous?

• A.It executes code in the victim's browser.
• B.It leaks back-end database information.
• C.It bypasses login pages.
• D.It forces a victim to click malicious links.

Comment: *

Name: *

Email: *

Verification: *

In a FortiWeb HA active-active configuration, which statement is accurate?

• A.Only one unit processes traffic while the other remains completely idle.
• B.All members can process traffic simultaneously, improving throughput while still providing redundancy.
• C.Active-active mode is only supported in transparent bridge mode.
• D.Active-active requires manual failover initiated by the administrator.

Comment: *

Name: *

Email: *

Verification: *

Your company hosts two different web applications: a shopping site and a blog. You want FortiWeb to apply different protection profiles and forwarding rules to each application. How should you configure FortiWeb to support this?

• A.Use one server policy with different virtual IP addresses.
• B.Use source network address translation (SNAT) with web caching to split the requests.
• C.Configure one server pool but assign different firewall policies.
• D.Create a separate server policy for each application.

Comment: *

Name: *

Email: *

Verification: *