Fortinet FCP_FWB_AD-7.4 Exam - Topic 4 Question 10 Discussion

Actual exam question for Fortinet's FCP_FWB_AD-7.4 exam

Question #: 10
Topic #: 4

[All FCP_FWB_AD-7.4 Questions]

Review the following configuration:

What are two routing behaviors that you can expect on FortiWeb after this configuration change? (Choose two.)

ANon-HTTP traffic routed through the FortiWeb is allowed.

BIPv6 routing is enabled.

CNon-HTTP traffic destined to the FortiWeb virtual server IP address is dropped.

DOnly ICMP traffic is allowed. All other traffic is dropped.

Show Suggested Answer

Suggested Answer: A, C

FortiWeb is primarily designed to handle HTTP and HTTPS traffic, protecting web applications from various threats. By default, when operating in reverse proxy mode, FortiWeb does not forward non-HTTP/HTTPS protocols to protected servers. However, administrators can configure FortiWeb to handle non-HTTP/HTTPS traffic differently using the config router setting command. This command allows enabling IP-based forwarding (routing) for non-HTTP/HTTPS traffic. When enabled, FortiWeb can route non-HTTP traffic through itself to the appropriate backend servers.

Despite this capability, any non-HTTP/HTTPS traffic that is destined directly for a FortiWeb virtual server IP address is dropped. This means that while FortiWeb can be configured to forward non-HTTP/HTTPS traffic to backend servers, it will not process non-HTTP/HTTPS traffic targeted at its own virtual server IPs.

Regarding IPv6 routing, FortiWeb does support IPv6 in various operation modes, including reverse proxy, offline inspection, and transparent inspection. However, enabling IPv6 routing requires specific configurations and is not automatically enabled by default.

by Barney at Jul 05, 2025, 08:23 AM

Limited Time Offer

25%

Off

Get Premium FCP_FWB_AD-7.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shizue

2 months ago

IPv6 routing is definitely enabled with this config.

upvoted 0 times

...

Jesse

2 months ago

Wait, are you sure about that? Sounds off.

upvoted 0 times

...

Evangelina

2 months ago

Non-HTTP traffic routed through FortiWeb is allowed.

upvoted 0 times

...

Dorothy

3 months ago

I think only ICMP traffic being allowed is a bit extreme.

upvoted 0 times

...

Rachael

3 months ago

Totally agree, that's a key behavior!

upvoted 0 times

...

Bette

3 months ago

I’m leaning towards the option that states non-HTTP traffic is dropped. It seems to fit with what we practiced about FortiWeb's behavior.

upvoted 0 times

...

Corrina

3 months ago

I feel like IPv6 routing was mentioned in the study materials, but I can't recall if it was enabled by default or needed to be configured.

upvoted 0 times

...

Glendora

4 months ago

I think I saw a similar question where only specific types of traffic were allowed through FortiWeb. Could it be that only ICMP is allowed here?

upvoted 0 times

...

Shenika

4 months ago

I remember something about non-HTTP traffic being handled differently, but I'm not sure if it's allowed or dropped.

upvoted 0 times

...

Felicitas

4 months ago

This is a good question that tests our understanding of FortiWeb routing. I'll methodically go through each option and compare it to the configuration to determine the two correct behaviors.

upvoted 0 times

...

Willow

4 months ago

I'm a bit confused by this question. The options don't seem to match the configuration very well. I'll need to re-read the question and image a few times to make sure I understand what they're asking.

upvoted 0 times

...

Johna

4 months ago

Okay, based on the configuration shown, I think the correct answers are A and C. Non-HTTP traffic should be allowed, and non-HTTP traffic destined for the virtual server IP should be dropped.

upvoted 0 times

...

Dexter

5 months ago

Hmm, the configuration image doesn't provide a lot of detail. I'm not sure I have enough information to confidently answer this question. I'll need to think it through carefully.

upvoted 0 times

...

Gerardo

5 months ago

This looks like a straightforward configuration question. I'll need to carefully review the image and options to determine the two correct routing behaviors.

upvoted 0 times

...

Katie

6 months ago

I'm feeling confident about this one. C and D are the correct options. The configuration clearly shows that non-HTTP traffic is dropped, and only ICMP is allowed, so D must be true as well.

upvoted 0 times

Nobuko

5 months ago

I think you're right, C and D seem to be the correct options based on the configuration.

upvoted 0 times

...

Raymon

7 months ago

Haha, this exam is trying to trick us! I'm guessing B and C are the right answers. IPv6 is enabled, and non-HTTP traffic is dropped. Simple as that!

upvoted 0 times

Harrison

6 months ago

I think you're right, B and C seem like the correct answers.

upvoted 0 times

...

Doyle

7 months ago

I'm not sure about B and D, they don't seem to be related to the configuration change.

upvoted 0 times

...

Jerry

7 months ago

This is a tricky one. I'm going to go with C and D. The image shows the FortiWeb is configured to drop non-HTTP traffic, and the question mentions 'routing behaviors', so D must also be correct.

upvoted 0 times

...

Rolland

7 months ago

C and A seem to be the correct options. The configuration suggests that non-HTTP traffic will be dropped, but the question asks about routing behaviors, so A must also be true.

upvoted 0 times