Apply Web Application Security NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–16

1. 16application · medium

   A healthcare organization's web portal is protected by FortiWeb. The security team notices that the machine-learning anomaly detection engine is generating a high number of false positives, flagging legitimate user behavior as suspicious. The team wants to reduce false positives while still detecting real anomalies. What should the administrator do?

   • AApply a different protection profile that has stricter signature settings to the virtual server.
   • BDisable the machine-learning anomaly detection engine and rely only on signature-based protection.
   • CIncrease the number of custom signatures to block more traffic and reduce false positives.
   • DAdjust the anomaly detection sensitivity threshold in the protection profile to better match the application's normal traffic.
   Reveal Solution Discussion Select an answer first