Apply Web Application Security NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In FortiWeb, where is a protection profile applied to enforce security policies?

   • ATo a virtual server
   • BTo a physical network interface
   • CTo a user group
   • DTo a DNS zone
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of signature-based protection in FortiWeb?

   • ATo enforce access control policies based on user roles
   • BTo encrypt traffic between clients and the web server
   • CTo learn normal traffic patterns and flag deviations
   • DTo detect and block known web application attacks using predefined and custom signatures
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A retail company runs a public-facing web application on FortiWeb. The security team has identified a new SQL injection variant that exploits a specific parameter in the /checkout endpoint. The vendor has not yet released a signature for this variant. The team wants to block this attack immediately without affecting other traffic. What should the administrator do?

   • ACreate a custom signature that matches the attack pattern and add it to the protection profile applied to the virtual server.
   • BApply a new protection profile that only includes the default signature set to the virtual server.
   • CEnable the machine-learning anomaly detection engine to automatically block all traffic to the /checkout endpoint.
   • DDisable the signature-based protection for the /checkout endpoint to prevent false positives while the vendor updates.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An e-commerce company uses FortiWeb to protect its website. The machine-learning anomaly detection engine has been running for several weeks and has established a baseline. The security team wants to review the anomalies that the engine has detected to determine if any require further investigation. Where should the administrator look for this information?

   • AThe custom signature list
   • BThe virtual server configuration page
   • CThe anomaly detection logs and reports in the FortiWeb dashboard
   • DThe signature-based protection logs for blocked requests
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a key advantage of machine-learning anomaly detection over signature-based detection?

   • AIt can detect previously unknown attacks that do not match existing signatures
   • BIt eliminates the need for any other security measures
   • CIt guarantees zero false positives
   • DIt requires no initial configuration or tuning
   Reveal Solution Discussion Select an answer first