Regulation (REG) Fortiweb Practice Questions

How does FortiWeb protect against defacement attacks?

• AA. It keeps a complete backup of all files and the database.
• BB. It keeps hashes of files and periodically compares them to the server.
• CC. It keeps full copies of all files and directories.
• DD. It keeps a live duplicate of the database.

In which scenario might you want to use the compression feature on FortiWeb?

• AA. When you are serving many corporate road warriors using 4G tablets and phones
• BB. When you are offering a music streaming service
• CC. When you want to reduce buffering of video streams
• DD. Never, since most traffic today is already highly compressed

What role does FortiWeb play in ensuring PCI DSS compliance?

• AA. It provides the ability to securely process cash transactions.
• BB. It provides the required SQL server protection.
• CC. It provides the WAF required by PCI.
• DD. It provides credit card processing capabilities.

Refer to the exhibit. Many legitimate users are being identified as bots. FortiWeb bot detection has been configured with the settings shown in the exhibit. The FortiWeb administrator has already verified that the current model is accurate. What can the administrator do to fix this problem, making sure that real bots are not allowed through FortiWeb?

• AA. Change Model Type to Strict
• BB. Change Action under Action Settings to Alert
• CC. Disable Dynamically Update Model
• DD. Enable Bot Confirmation

What role does FortiWeb play in ensuring PCI DSS compliance?

• AA. PCI specifically requires a WAF
• BB. Provides credit card processing capabilities
• CC. Provide ability to securely process cash transactions
• DD. Provides load balancing between multiple web servers