Apply Web Application Security NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company's web application is protected by FortiWeb. The machine-learning anomaly detection engine has been running for a month and has established a baseline. The security team wants to ensure that the engine is still accurately reflecting the application's normal traffic after a major feature update that changed user behavior. What should the administrator do?

   • ARetrain the machine-learning engine to establish a new baseline based on the updated traffic patterns.
   • BDisable the machine-learning engine and use only custom signatures.
   • CIncrease the sensitivity threshold to accommodate the new traffic patterns.
   • DKeep the existing baseline and rely on signature-based protection for any new threats.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company hosts two web applications on the same FortiWeb appliance. The first application is a public marketing site that requires only basic protection. The second is a customer portal that handles sensitive data and requires strict signature-based protection and machine-learning anomaly detection. The administrator wants to enforce different security policies for each application. What should the administrator do?

   • AUse IP-based access control lists to differentiate security enforcement between the two applications.
   • BCreate two protection profiles with different settings and apply each to the corresponding virtual server.
   • CApply the same protection profile to both virtual servers and adjust the settings globally.
   • DConfigure the machine-learning engine to automatically assign different policies based on the URL path.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A financial services company uses FortiWeb to protect its customer portal. The portal experiences normal traffic patterns during business hours and low traffic at night. The security team wants to detect and block unusual traffic that deviates from the established baseline, such as a sudden spike in login attempts from a single IP. Which FortiWeb feature should be enabled in the protection profile?

   • ACustom signature-based protection
   • BStatic URL rewriting
   • CMachine-learning based anomaly detection
   • DIP reputation filtering
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   How does FortiWeb's machine-learning engine identify potential threats?

   • ABy blocking all traffic from unknown IP addresses
   • BBy comparing traffic against a static list of known attack patterns
   • CBy establishing a baseline of normal traffic and detecting deviations from it
   • DBy requiring manual configuration of all threat indicators
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is deploying FortiWeb to protect a new API that will be accessed by both internal employees and external partners. The security team wants to enforce signature-based protection for known attacks and machine-learning anomaly detection for unknown threats. The team also wants to ensure that the API's protection profile is easy to manage and can be reused if the API is moved to a different virtual server. What should the administrator do?

   • AApply the default protection profile to the virtual server and rely on the machine-learning engine to automatically enable signatures.
   • BEnable signature-based protection globally and configure machine-learning anomaly detection separately for each client IP.
   • CCreate a protection profile that includes both signature-based protection and machine-learning anomaly detection, then apply it to the virtual server hosting the API.
   • DCreate two separate virtual servers, one for internal employees and one for external partners, each with its own protection profile.
   Reveal Solution Discussion Select an answer first