In the context of FortiWeb acting as an API gateway, which of the following is a typical gateway function?

Storing API response data in a database

Designing the API schema for developers

Routing API requests to the appropriate backend service

What is the primary purpose of API discovery in FortiWeb?

To replace the need for a separate API gateway by directly routing all external traffic

To identify and catalog API endpoints and their characteristics within the protected environment

To encrypt all API payloads in transit using TLS

To automatically block all API traffic that does not match a predefined schema

An e-commerce company's API allows users to search for products. Attackers are exploiting the /search endpoint by sending a high volume of requests with SQL injection payloads in the 'q' parameter. The company wants to block these attacks while keeping the API available for legitimate users. What should the administrator configure?

Configure API gateway mode to route traffic to a different backend

Enable bot mitigation to block all automated requests to the endpoint

Enable API schema validation to restrict the 'q' parameter to alphanumeric characters

Enable SQL injection detection and rate limiting on the /search endpoint

A security analyst needs to identify which API endpoints are most frequently targeted by injection attacks over the past month. The analyst wants to see a summary of attack counts per endpoint. What should the administrator provide?

A rate limiting report showing blocked requests

An API discovery report showing all discovered endpoints

A raw log export of all API traffic

A custom report that groups API security events by endpoint and attack type

A software company is migrating its internal microservices to a new architecture. The company wants FortiWeb to act as a single entry point for all API traffic, handling authentication, routing requests to the correct backend service, and applying consistent security policies. What FortiWeb capability should the administrator enable?

API discovery with a scheduled scan

FortinetNSE 5 - FortiWeb Administrator

Domain 2Objective 2

Configure API Discovery and Protection NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 2)

Part of the Web Application and API Security with Botnet Mitigation domain, which makes up ~34% of our current practice bank. Fortinet does not publish an official question count, but from its 65-minute exam (~25–45 total, ~9–15 in this domain), expect 3–5 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

8concepts

Questions 6–10

6foundation · easy
In the context of FortiWeb acting as an API gateway, which of the following is a typical gateway function?
Select an answer first
7foundation · easy
What is the primary purpose of API discovery in FortiWeb?
Select an answer first
8application · medium
An e-commerce company's API allows users to search for products. Attackers are exploiting the /search endpoint by sending a high volume of requests with SQL injection payloads in the 'q' parameter. The company wants to block these attacks while keeping the API available for legitimate users. What should the administrator configure?
Select an answer first
9expert · hard
A security analyst needs to identify which API endpoints are most frequently targeted by injection attacks over the past month. The analyst wants to see a summary of attack counts per endpoint. What should the administrator provide?
Select an answer first
10application · medium
A software company is migrating its internal microservices to a new architecture. The company wants FortiWeb to act as a single entry point for all API traffic, handling authentication, routing requests to the correct backend service, and applying consistent security policies. What FortiWeb capability should the administrator enable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTIWEB-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTIWEB-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Configure API Discovery and Protection NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

In the context of FortiWeb acting as an API gateway, which of the following is a typical gateway function?

What is the primary purpose of API discovery in FortiWeb?

A security analyst needs to identify which API endpoints are most frequently targeted by injection attacks over the past month. The analyst wants to see a summary of attack counts per endpoint. What should the administrator provide?

Keep studying — Web Application and API Security with Botnet Mitigation