Refer to the exhibit.You are a FortiWeb administrator. FortiWeb is deployed between a FortiGate and two back-end web servers, as shown in the diagram. No server policies are currently configured on FortiWeb.While testing, you notice that a student system in the 100.64.0.0/24 network is still able to access the back-end servers in 10.1.1.0/24, even though FortiWeb is not logging or inspecting the traffic.Which action should you take to ensure FortiWeb blocks or inspects all traffic before it reaches the back-end servers?
Answer(s): D
Disabling ip-forward prevents FortiWeb from acting as a simple Layer 3 forwarding device when no matching server policy exists. This ensures traffic cannot bypass FortiWeb inspection and will be blocked unless it matches a configured policy that allows FortiWeb to inspect or process it before reaching the back-end servers.
Which URL should you rewrite to reduce security risk?
Answer(s): A
The URL exposes a specific application version in the path. Rewriting it reduces information disclosure, making it harder for attackers to identify the application version and target known vulnerabilities.
You are setting up a FortiWeb policy to protect a customer login portal. Users connect to https:// login.training.lab, and you want FortiWeb to forward those requests to a load-balanced pool of back-end servers.Which three components must you configure to complete the server policy?
Answer(s): C
A FortiWeb server policy needs a virtual server to receive client traffic, a server pool to define the load-balanced back-end servers, and service/port settings so FortiWeb knows which traffic the policy should handle.
Refer to the exhibit.A FortiWeb administrator notices an alert triggered under the Threshold Based Detection category, with the message: Threshold Based Content Scraping Detection (Bot Detection) violation.Based on the log details, what is the most likely cause of this alert?
Threshold Based Content Scraping Detection indicates FortiWeb detected behavior consistent with automated content harvesting. This usually occurs when a client repeatedly or systematically accesses web pages in a pattern that exceeds configured thresholds, which is typical of a bot or scraping script attempting to extract site content.
Your e-commerce platform is experiencing frequent SQL injection attempts. You need FortiWeb to actively inspect, enforce, and block attacks inline before traffic reaches the web servers.The deployment must support the full FortiWeb security feature set without operational limitations, including protocol validation, attack detection, and policy enforcement.Which FortiWeb operation mode should you configure to proactively intercept and block threats such as SQL injection attempts?
Reverse proxy mode places FortiWeb inline as the termination point for client connections and allows it to fully inspect, validate, enforce policies, and block malicious requests before they reach the protected web servers. This mode provides the most complete FortiWeb security capability for proactively stopping SQL injection and other application-layer attacks.
Refer to the exhibit.A FortiWeb administrator tests a new form input value after training the machine learning (ML) anomaly detection system.The hidden Markov model (HMM) flags the input as abnormal, while the support vector machine (SVM) model classifies it as normal. FortiWeb allows the request.What does this result indicate about the FortiWeb ML anomaly detection behavior?
FortiWeb ML anomaly detection uses multiple models to evaluate whether input is truly malicious or simply unusual. In this case, the input appears abnormal to the HMM pattern model, but the SVM classification considers it acceptable, so FortiWeb treats it as normal and allows the request.
A third-party penetration test reveals that users can bypass login controls through a mobile API. Your current FortiWeb configuration includes zero trust network access (ZTNA) profiles and cookie security, but API protection and client management are not enabled. The security team asks you to recommend the most effective way to close this gap.Which FortiWeb adjustment would best prevent future unauthorized API access?
Answer(s): B
API protection and client management are designed to control and validate access to API endpoints, including mobile API traffic. Enabling them allows FortiWeb to apply identity-aware checks, manage API clients, and prevent unauthorized access paths that are not adequately protected by cookie security alone.
Which statement best describes the difference between SAML authentication and HTML authentication in FortiWeb site publishing?
SAML authentication relies on an external identity provider to authenticate the user and return an assertion to FortiWeb. HTML authentication uses a FortiWeb-hosted login page or form-based authentication process where FortiWeb directly handles the user login workflow for the published site.
Share your comments for Fortinet NSE5_FWB_AD-8.0 exam with other users:
answers are correct
good explanation
hi team just want to know if there is any update version of the exam 350-401
helpful on 2017 scrum guide
planning to attempt for the exam.
pleaseee upload
thanks ly so i have information cia
hello team, i need sap qm dumps for practice
it’s good but not senatios based
q.119 - the correct answer is b - they are not captured in an update set as theyre data.
good matter
please upload c_sacp_2308
please upload the dump. thanks very much !!
good questions
hi, could you please update the latest dump version
this question is keep repeat : you are developing a sales application that will contain several azure cloud services and handle different components of a transaction. different cloud services will process customer orders, billing, payment, inventory, and shipping. you need to recommend a solution to enable the cloud services to asynchronously communicate transaction information by using xml messages. what should you include in the recommendation?
great questions
its realy good
oracle 1z0-1059-22 dumps
please share me the pdf..
q50: which two functions can be used by an end user when pivoting an interactive report? the correct answer is a, c because we do not have rank in the function pivoting you can check in the apex app
best to practice
so far it is good
please provide me the dump
i failed the cisa exam today. but i have found all the questions that were on the exam to be on this site.
in question 272 the right answer states that an autonomous acces point is "configured and managed by the wlc" but this is not what i have learned in my ccna course. is this a mistake? i understand that lightweight aps are managed by wlc while autonomous work as standalones on the wlan.
it was helpful
good question
really nice
please i need dumps for isc2 cybersecuity
ans is coldline i think
very helpful
can you please provide dumps so that it helps me more
thank you for providing me with the updated question and answers. this version has all the questions from the exam. i just saw them in my exam this morning. i passed my exam today.