Fortinet Exam FCP_WCS_AD-7.4 Topic 4 Question 26 Discussion

Actual exam question for Fortinet's FCP_WCS_AD-7.4 exam

Question #: 26
Topic #: 4

Refer to the exhibit.

Which two statements are correct about traffic flow in FortiWeb Cloud? (Choose two.)

AThe DNS name for the application servers must point to FortiWeb Cloud.

BFortiWeb Cloud filters the incoming traffic from users, blocking the OWASP Top 10 attacks, zero-day threats, and other application layer attacks.

CFortiWeb Cloud can protect the application servers only if they are all located in the same virtual public cloud (VPC).

DStep 2 requires an AWS S3 bucket to be created.

Show Suggested Answer

Suggested Answer: A, B

DNS Configuration:

For FortiWeb Cloud to effectively protect web applications, the DNS records for the application servers must be configured to point to FortiWeb Cloud. This ensures that all incoming traffic is routed through FortiWeb Cloud for inspection and protection (Option A).

Traffic Filtering:

FortiWeb Cloud provides robust protection by filtering incoming traffic to block the OWASP Top 10 attacks, zero-day threats, and other application layer attacks. This ensures the security and integrity of the web applications it protects (Option B).

Other Options Analysis:

Option C is incorrect because FortiWeb Cloud can protect application servers across different VPCs or regions, not just within the same VPC.

Option D is incorrect because step 2 does not require an AWS S3 bucket; it refers to the inspection and filtering of incoming traffic.

FortiWeb Cloud Overview: FortiWeb Cloud

DNS Configuration for Web Applications: DNS Configuration

by Clorinda at May 03, 2025, 05:49 AM

Limited Time Offer

25%

1 months ago

I agree with Karl, B and D are the correct answers here. The DNS name for the application servers pointing to FortiWeb Cloud is also an important point.

upvoted 0 times

Alberta

24 hours ago

Yes, I agree. FortiWeb Cloud filters incoming traffic and Step 2 requires an AWS S3 bucket.

upvoted 0 times

...

Kent

9 days ago

I think B and D are the correct answers.

upvoted 0 times

...

Karl

1 months ago

B and D are definitely correct. The question clearly states that FortiWeb Cloud filters and blocks attacks, and that an S3 bucket is required in step 2.

upvoted 0 times

...