A company's web application is protected by FortiWeb. The machine-learning anomaly detection engine has been in monitor mode for two weeks and has established a baseline. The security team wants to enable blocking, but they are concerned about false positives during peak traffic hours. They have also noticed that the application's traffic patterns vary significantly between weekdays and weekends. What should the administrator do to minimize false positives when enabling blocking?

Enable blocking and set the sensitivity threshold to a level that accounts for the variability between weekday and weekend traffic.

Keep the engine in monitor mode indefinitely and review anomalies manually.

Disable the machine-learning engine and rely on custom signatures for all threats.

Enable blocking immediately with the default sensitivity threshold.

A company's web application has a protection profile that includes machine-learning anomaly detection. The security team wants to ensure that the machine-learning engine has enough data to establish an accurate baseline before enforcing strict blocking. What should the administrator do?

Enable blocking immediately and adjust the sensitivity threshold as false positives occur.

Run the machine-learning engine in observation mode for a period to collect baseline data before enabling blocking.

Create custom signatures to simulate the baseline traffic.

Disable the machine-learning engine and rely on signature-based protection only.

A company has multiple virtual servers on FortiWeb, each hosting a different application. The security team wants to apply a consistent baseline security policy to all applications, but also wants to customize the policy for one application that has unique requirements. What is the most efficient way to achieve this?

Enable machine-learning anomaly detection globally and rely on it to handle all security requirements.

Apply the same protection profile to all virtual servers and use IP-based rules to customize behavior for the unique application.

Create a separate protection profile for each application from scratch.

Create a base protection profile with common settings, then clone it and modify the clone for the application with unique requirements.

What is the role of a protection profile in FortiWeb?

To manage user authentication for web applications

To store SSL certificates for HTTPS connections

To define network routing rules for traffic

To bundle security features and apply them to virtual servers

FortinetNSE 5 - FortiWeb Administrator

Domain 2Objective 1

Apply Web Application Security NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Part of the Web Application and API Security with Botnet Mitigation domain, which makes up ~34% of our current practice bank. Fortinet does not publish an official question count, but from its 65-minute exam (~25–45 total, ~9–15 in this domain), expect 3–5 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

3concepts

Questions 1–5

1foundation · easy
Which FortiWeb feature allows an administrator to create a signature for a proprietary application vulnerability?
Select an answer first
2expert · hard
A company's web application is protected by FortiWeb. The machine-learning anomaly detection engine has been in monitor mode for two weeks and has established a baseline. The security team wants to enable blocking, but they are concerned about false positives during peak traffic hours. They have also noticed that the application's traffic patterns vary significantly between weekdays and weekends. What should the administrator do to minimize false positives when enabling blocking?
Select an answer first
3application · medium
A company's web application has a protection profile that includes machine-learning anomaly detection. The security team wants to ensure that the machine-learning engine has enough data to establish an accurate baseline before enforcing strict blocking. What should the administrator do?
Select an answer first
4application · medium
A company has multiple virtual servers on FortiWeb, each hosting a different application. The security team wants to apply a consistent baseline security policy to all applications, but also wants to customize the policy for one application that has unique requirements. What is the most efficient way to achieve this?
Select an answer first
5foundation · easy
What is the role of a protection profile in FortiWeb?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTIWEB-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTIWEB-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Apply Web Application Security NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

Which FortiWeb feature allows an administrator to create a signature for a proprietary application vulnerability?

A company's web application has a protection profile that includes machine-learning anomaly detection. The security team wants to ensure that the machine-learning engine has enough data to establish an accurate baseline before enforcing strict blocking. What should the administrator do?

What is the role of a protection profile in FortiWeb?

Keep studying — Web Application and API Security with Botnet Mitigation