Configure API Discovery and Protection NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What type of information can be found in a FortiWeb API monitoring report?

   • AThe API's database schema
   • BThe API developer's contact information
   • CThe number of API requests per endpoint
   • DThe source code of the API
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security operations team is investigating a potential API breach. They need to determine whether any requests to a /admin endpoint contained SQL injection payloads and whether any of those requests were blocked by FortiWeb. The team has access to FortiWeb's logs. What should the administrator do to answer this question?

   • ASearch FortiWeb's logs for requests to /admin with SQL injection signatures and review the action taken (blocked or allowed)
   • BEnable API discovery to re-analyze the /admin endpoint traffic
   • CConfigure API gateway mode to route /admin traffic to a logging server
   • DCreate a custom report showing all API security events
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What does FortiWeb do with the API schema it learns during discovery?

   • AIt stores the schema and uses it to validate API requests against expected structures
   • BIt uses the schema to generate new API endpoints
   • CIt sends the schema to the API developer for manual review
   • DIt immediately deletes the schema after discovery to save memory
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A large enterprise runs a public API that handles both authenticated and unauthenticated requests. The security team has noticed that attackers are using valid API keys from a compromised partner account to access sensitive endpoints. The team wants FortiWeb to detect this abnormal behavior while minimizing false positives for legitimate partners. What should the administrator configure?

   • AConfigure rate limiting to block requests from the compromised API key
   • BEnable API schema validation to reject requests that do not match the expected format
   • CCreate a custom report to review API key usage manually
   • DEnable API anomaly detection to flag unusual request patterns from the compromised API key
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A FortiWeb administrator has discovered an API and the learned schema includes a /reports endpoint with a 'date' parameter. The API documentation states that 'date' must be in YYYY-MM-DD format. However, some legitimate clients send dates in MM/DD/YYYY format. The administrator wants to enforce the documented format without breaking legitimate clients. What should the administrator do?

   • AManually edit the schema to define 'date' as a string with a regex pattern that accepts both formats
   • BCreate a protection policy that blocks requests with MM/DD/YYYY dates
   • CEnable API discovery to re-learn the 'date' parameter from traffic
   • DEnable API gateway mode to normalize the 'date' parameter to YYYY-MM-DD
   Reveal Solution Discussion Select an answer first