Implement Web Vulnerability Scans NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A FortiWeb administrator is reviewing a scan report and sees that a 'Cross-Site Request Forgery (CSRF)' vulnerability is listed as 'High' severity. The application is a banking portal. What is the most important consideration when deciding how to remediate this finding?

   • AThe CSRF vulnerability could allow an attacker to perform unauthorized actions on behalf of a logged-in user.
   • BThe CSRF vulnerability is a low priority because it requires user interaction.
   • CThe CSRF vulnerability can be fixed by simply adding a CAPTCHA to all forms.
   • DThe CSRF vulnerability is only exploitable if the user has JavaScript disabled.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A FortiWeb administrator is reviewing a scan report and sees a 'High' severity finding for 'XML External Entity (XXE)' on a web service endpoint. The endpoint processes XML data from external partners. What is the most important factor in determining the remediation priority?

   • AThe XXE vulnerability is only exploitable if the attacker has network access to the server.
   • BThe XXE vulnerability could allow an attacker to read sensitive files from the server.
   • CThe XXE vulnerability is a low priority because it requires a specific XML payload.
   • DThe XXE vulnerability can be fixed by simply upgrading the XML parser.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company has a web application with two distinct components: a public marketing site and an internal admin portal. The admin portal is only accessible from the corporate network. The security team wants to scan both components for vulnerabilities. What is the most appropriate way to configure the scan targets in FortiWeb?

   • ACreate a single scan configuration that includes both components as targets.
   • BCreate two separate scan configurations, one for each component, with appropriate access settings for the internal portal.
   • CUse the same scan profile for both components but schedule them at different times.
   • DScan only the public marketing site because the internal portal is protected by the corporate network.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A FortiWeb administrator reviews a vulnerability scan report and notices that the 'SQL Injection' finding is marked as 'Confirmed' but the 'Information Disclosure' finding is marked as 'Potential'. The development team asks which finding requires immediate action. What should the administrator tell them?

   • ANeither finding requires immediate action because the scan was only a baseline assessment.
   • BThe 'Confirmed' SQL injection finding should be addressed first because it is verified and poses a definite risk.
   • CBoth findings should be addressed simultaneously because they are both listed in the report.
   • DThe 'Potential' Information Disclosure finding should be addressed first because it might be a false negative.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company has a web application that uses a login form. The security team wants to run a vulnerability scan that includes testing for brute-force attacks on the login form. Which scan profile should the administrator select in FortiWeb?

   • AA profile that focuses on network-level vulnerabilities.
   • BA profile that includes authentication testing and brute-force attack simulations.
   • CA profile that only tests for SQL injection and XSS.
   • DA profile that only scans for information disclosure.
   Reveal Solution Discussion Select an answer first