Exam FCP_FWB_AD-7.4 topic 1 question 36 discussion

Actual exam question from Fortinet's FCP_FWB_AD-7.4

Question #: 36
Topic #: 1

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers.
When an attack occurs, FortiWeb blocks traffic based on the 192.0.2.1 source IP address, which belongs to FortiADC. This setup is breaking all connectivity and genuine clients are not able to access the servers.
What can the administrator do to avoid this problem? (Choose two.)

A. Enable and configure the Preserve Client IP setting on the client.
B. No special configuration is required; connectivity will be re-established for all clients after the set timeout.
C. Place FortiWeb in front of FortiADC.
D. Enable and configure the Use X-Forwarded-For setting on FortiWeb.

Show Suggested Answer

Suggested Answer: CD 🗳️

by Mary_Matic at April 15, 2025, 7:47 a.m.