Configure API Discovery and Protection NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   When FortiWeb acts as an API gateway, what does it typically handle for API requests?

   • ADatabase indexing for the API backend
   • BCode debugging for API developers
   • CAuthentication of the API client
   • DOperating system updates for API servers
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A FortiWeb administrator has enabled API discovery for a new API. After a week, the learned schema shows that a /orders endpoint has a 'status' parameter that sometimes appears as a string and sometimes as an integer. The API documentation says 'status' is always a string. What should the administrator do to ensure FortiWeb validates 'status' correctly?

   • ARe-run API discovery with a longer schedule to capture more traffic
   • BCreate a custom report to track the 'status' parameter types
   • CManually edit the learned schema to set 'status' as a string type
   • DEnable API gateway mode to normalize the 'status' parameter
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company has been running FortiWeb for several months with API discovery enabled. The security team wants to ensure that the discovered API schema is up to date, as the development team frequently adds new endpoints and modifies existing ones. The team is concerned about the overhead of continuous discovery. What should the administrator do?

   • ADisable API discovery and manually update the schema when the development team announces changes
   • BEnable API discovery to run continuously to ensure the schema is always current
   • CEnable API monitoring to track schema changes instead of discovery
   • DConfigure API discovery to run on a regular schedule, such as nightly, to capture new endpoints and schema changes
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a common API-specific threat that FortiWeb is designed to detect?

   • ADNS misconfiguration
   • BSQL injection in API parameters
   • CPhysical theft of the API server
   • DPower outage in the data center
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following is an example of an API endpoint characteristic that FortiWeb identifies during discovery?

   • AThe operating system of the API client
   • BThe MAC address of the client device
   • CThe physical location of the server hosting the API
   • DThe HTTP method (GET, POST, PUT, DELETE) used to access the endpoint
   Reveal Solution Discussion Select an answer first