Which two statements about running a vulnerability scan are true? (Choose two.)
A. You should run the vulnerability scan during a maintenance window.
B. You should run the vulnerability scan on a live website to get accurate results.
C. Vulnerability scanning increases the load on FortiWeb, so it should be avoided.
D. You should run the vulnerability scan in a test environment.
正解:A,D
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
What must you do with your FortiWeb logs to ensure PCI DSS compliance?
A. Store in an off-site location
B. Erase them every two weeks
C. Compress them into a .zip file format
D. Enable masking of sensitive data
正解:D
質問 3:
What role does FortiWeb play in ensuring PCI DSS compliance?
A. Provide ability to securely process cash transactions
B. Provides load balancing between multiple web servers
C. Provides credit card processing capabilities
D. PCI specifically requires a WAF
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
When generating a protection configuration from an auto learning report what critical step must you do before generating the final protection configuration?
A. Take the FortiWeb offline to apply the profile
B. Activate the report to create t profile
C. Restart the FortiWeb to clear the caches
D. Drill down in the report to correct any false positives.
正解:D
質問 5:
You are configuring FortiAnalyzer to store logs from FortiWeb.
Which is true?
A. FortiAnalyzer will store antivirus and DLP archives from FortiWeb.
B. You must enable ADOMs on FortiAnalyzer.
C. FortiWeb will query FortiAnalyzer for reports, instead of generating them locally.
D. To store logs from FortiWeb 6.4, on FortiAnalyzer, you must select "FrotiWeb 6.1".
正解:B
水城** -
容に関してもわかりやすく、一つ一つ確認しながら読み進めることができました。見事試験合格しました。ソフト版の模擬はすごいなぁと感心します。