View Full Fortinet NSE5_FWB_AD-8.0 Exam Dumps and Practice Test Dumps

 

Question 361. Which FortiWeb feature allows administrators to define expected values and structures for API requests and responses?

1. API schema validation
2. IP reputation
3. Server load balancing
4. Web caching

Correct Answer: 1. API schema validation

Explanation :-

API schema validation compares API traffic against a defined schema describing expected request and response structures. This can help identify requests containing unexpected parameters, incorrect data types, missing required elements, or other deviations from the documented API behavior. By validating API traffic against an expected model, FortiWeb can provide an additional security control for applications that expose APIs. IP reputation evaluates client addresses, server load balancing distributes requests among backend servers, and web caching improves content delivery. API schema validation is therefore appropriate when an administrator needs to ensure that API traffic follows the structure and rules defined for the protected API.

Question 362. An administrator wants to prevent clients from accessing a sensitive application URL unless they originate from an approved source. Which FortiWeb capability is most relevant?

1. HTTP compression
2. URL access control
3. SSL offloading
4. Web caching

Correct Answer: 2. URL access control

Explanation :-

URL access control can be used to define restrictions for specific application resources and determine which requests should be permitted. When access to a sensitive URL must be limited based on defined conditions, administrators can create appropriate access-control rules. This provides a way to restrict application paths that should not be generally available to all clients. HTTP compression changes content-transfer characteristics, SSL offloading handles encrypted connections, and web caching stores content for faster delivery. URL access control therefore addresses the requirement most directly. Administrators should ensure that access rules match legitimate application requirements so authorized users and required application functions are not unintentionally blocked.

Question 363. Which FortiWeb feature is designed to detect unusual traffic patterns that may indicate an application-layer denial-of-service attack?

1. DoS prevention
2. Certificate management
3. DNS forwarding
4. URL rewriting

Correct Answer: 1. DoS prevention

Explanation :-

FortiWeb DoS prevention provides controls designed to identify and mitigate excessive or abusive traffic directed at web applications. Application-layer denial-of-service attacks can attempt to exhaust application resources by sending unusually large numbers of requests or repeatedly targeting resource-intensive operations. DoS protection can use configured thresholds and traffic characteristics to identify activity that exceeds acceptable behavior and apply an appropriate response. Certificate management handles digital certificates, DNS forwarding handles DNS queries, and URL rewriting modifies requested URLs. DoS prevention is therefore the relevant FortiWeb security capability when the objective is to reduce the impact of excessive application-layer traffic.

Question 364. Which FortiWeb capability can help prevent users from submitting files that exceed an administrator-defined size limit?

1. IP reputation
2. File security controls
3. Server load balancing
4. DNS caching

Correct Answer: 2. File security controls

Explanation :-

File security controls can be used to inspect and restrict uploaded files according to configured security requirements. Depending on the policy, administrators can establish restrictions related to file characteristics, including permitted file types or upload size. Limiting oversized uploads can help prevent abuse of application resources and reduce risks associated with unrestricted file handling. IP reputation evaluates source addresses, server load balancing distributes requests, and DNS caching improves name-resolution performance. File security controls are therefore the appropriate mechanism when an administrator needs to enforce restrictions on uploaded content. These controls should be configured according to the application’s legitimate upload requirements to avoid disrupting valid users.

Question 365. Which FortiWeb feature can identify malicious requests based on the reputation of the source IP address?

1. IP reputation
2. API schema validation
3. Cookie security
4. HTTP method enforcement

Correct Answer: 1. IP reputation

Explanation :-

IP reputation uses information about the trustworthiness or known malicious activity associated with source IP addresses. FortiWeb can use reputation information as part of its traffic inspection and security decision process. This allows traffic from addresses associated with known malicious behavior to be treated differently according to the configured policy. API schema validation evaluates API structures, cookie security protects application cookies, and HTTP method enforcement controls permitted HTTP operations. None of those features primarily evaluates the reputation of the client IP. IP reputation is therefore the appropriate feature for identifying potentially malicious requests based on the source address.

Question 366. A web application requires users to authenticate before accessing administrative URLs. Which FortiWeb feature can assist with enforcing this requirement?

1. Web cache
2. Form-based authentication
3. Traffic shaping
4. DNS forwarding

Correct Answer: 2. Form-based authentication

Explanation :-

Form-based authentication can allow FortiWeb to participate in authentication workflows where users must provide credentials through a web form before accessing protected application resources. This can be useful when an application requires authentication for selected URLs or resources. FortiWeb can apply authentication-related policies according to the configured deployment and application requirements. Web caching stores frequently requested content, traffic shaping controls traffic characteristics, and DNS forwarding handles DNS resolution. Form-based authentication is therefore the relevant capability when the requirement involves authenticating users through a web-based login before granting access to protected application areas.

Question 367. Which FortiWeb function can modify a requested URL before forwarding the request to a backend server?

1. URL rewriting
2. IP reputation
3. Certificate validation
4. Health monitoring

Correct Answer: 1. URL rewriting

Explanation :-

URL rewriting allows FortiWeb to modify URL information according to configured rules before forwarding requests. This can be useful when the public-facing URL structure differs from the path expected by a backend application, or when administrators need to redirect or transform requests according to application requirements. IP reputation evaluates source addresses, certificate validation verifies aspects of secure connections, and health monitoring checks backend availability. URL rewriting directly addresses the requirement to alter URL information during request processing. Administrators should carefully design rewrite rules because incorrect transformations can cause application resources to become inaccessible or produce unexpected behavior.

Question 368. An administrator wants to inspect encrypted HTTPS traffic for web application attacks. What must FortiWeb be able to do first?

1. Disable all security policies
2. Terminate or decrypt the SSL/TLS connection
3. Remove the backend server
4. Disable logging

Correct Answer: 2. Terminate or decrypt the SSL/TLS connection

Explanation :-

Encrypted HTTPS traffic cannot be fully inspected as ordinary HTTP content until FortiWeb has access to the decrypted application data. In a deployment where FortiWeb terminates the client-side SSL/TLS session, it can decrypt the traffic and inspect the HTTP requests and responses using its web application security controls. This allows mechanisms such as attack signatures, access controls, and other inspection features to analyze application content. Disabling security policies or logging does not provide access to encrypted content, and removing the backend server would prevent normal application delivery. SSL/TLS termination or decryption is therefore an important prerequisite for inspecting protected HTTPS traffic.

Question 369. Which FortiWeb feature can help identify malicious file uploads based on configured file types or characteristics?

1. File security
2. Static routing
3. DNS forwarding
4. HTTP compression

Correct Answer: 1. File security

Explanation :-

File security controls allow FortiWeb to inspect and enforce security requirements for files uploaded through web applications. Administrators can configure policies that consider file characteristics and restrict content that does not meet defined requirements. This can help reduce the risk associated with malicious or inappropriate uploads reaching backend applications. Static routing determines packet forwarding paths, DNS forwarding handles DNS queries, and HTTP compression reduces the size of transmitted content. File security is therefore the appropriate capability for controlling potentially dangerous file uploads. Administrators should align the configured restrictions with the application’s legitimate file-upload requirements and carefully consider which file types and characteristics are acceptable.

Question 370. What is the primary purpose of FortiWeb logging?

1. To provide records of security and traffic-related events for analysis
2. To replace all backend servers
3. To assign MAC addresses to clients
4. To automatically rewrite every URL

Correct Answer: 1. To provide records of security and traffic-related events for analysis

Explanation :-

FortiWeb logging provides records of relevant traffic, security events, administrative activities, and other operational information depending on the configured logging settings. These records can help administrators investigate security incidents, troubleshoot policies, identify suspicious activity, and understand application traffic behavior. Logging does not replace backend servers, assign client MAC addresses, or automatically rewrite every URL. Effective logging is an important part of monitoring because security controls can generate valuable information about both blocked and permitted activity. Administrators should configure appropriate logging levels and destinations while considering storage requirements and the amount of information necessary for operational and security analysis.

Question 371. Which FortiWeb feature can protect against attempts to submit malformed HTTP requests that violate expected protocol behavior?

1. HTTP protocol constraints
2. Server load balancing
3. API discovery
4. Web caching

Correct Answer: 1. HTTP protocol constraints

Explanation :-

HTTP protocol constraints allow FortiWeb to enforce requirements related to valid HTTP request behavior. Malformed or abnormal requests can sometimes be used to exploit weaknesses in web applications or bypass security controls. By enforcing protocol expectations, FortiWeb can reject traffic that violates configured HTTP requirements. Server load balancing distributes requests among backend servers, API discovery identifies API endpoints, and web caching stores content for faster access. HTTP protocol constraints therefore provide the appropriate control for validating aspects of HTTP traffic. Administrators should configure these restrictions carefully because overly strict protocol requirements can interfere with legitimate clients or applications that use uncommon but valid HTTP behavior.

Question 372. Which FortiWeb capability can use predefined attack signatures to identify common web application threats?

1. Signature-based detection
2. Health checks
3. URL rewriting
4. Traffic forwarding

Correct Answer: 1. Signature-based detection

Explanation :-

Signature-based detection compares inspected application traffic against known patterns associated with recognized attacks. FortiWeb can use signatures to identify threats such as SQL injection, cross-site scripting, command injection, and other application-layer attacks. When a signature matches traffic, the associated security policy can determine whether the event should be blocked, logged, or handled in another configured manner. Health checks monitor backend availability, URL rewriting modifies URLs, and traffic forwarding concerns delivery of requests. Signature-based detection is therefore a key FortiWeb capability for identifying known attack patterns. Administrators should maintain appropriate signature configurations and tune policies according to the protected application’s requirements.

Question 373. An administrator needs to monitor whether a backend application server is responding correctly to requests. Which FortiWeb feature should be used?

1. Health check
2. Cookie security
3. IP reputation
4. API discovery

Correct Answer: 1. Health check

Explanation :-

Health checks allow FortiWeb to periodically test backend servers and determine whether they are available and responding according to configured criteria. This information is especially important when FortiWeb distributes traffic among multiple servers because unavailable servers should generally not receive new application requests. Health checks can use appropriate protocols, ports, and response conditions depending on the deployment. Cookie security protects application session information, IP reputation evaluates source addresses, and API discovery identifies API endpoints. A health check is therefore the appropriate mechanism for monitoring backend application availability and helping FortiWeb make informed decisions about where traffic can be forwarded.

Question 374. Which security control is most directly associated with detecting SQL statements embedded in malicious web requests?

1. SQL injection protection
2. Server health monitoring
3. DNS caching
4. SSL certificate management

Correct Answer: 1. SQL injection protection

Explanation :-

SQL injection protection is designed to identify malicious input that attempts to manipulate database queries through a vulnerable web application. Attackers may insert SQL syntax into parameters, form fields, cookies, or other request components in an effort to alter the application’s intended database operations. FortiWeb can inspect application traffic and use security signatures and related controls to detect patterns associated with SQL injection. Server health monitoring checks backend availability, DNS caching improves name resolution, and SSL certificate management handles cryptographic certificates. SQL injection protection therefore directly addresses the described threat and can help prevent malicious database-oriented input from reaching vulnerable application components.

Question 375. Which FortiWeb feature can limit the number of requests received from a client during a defined period?

1. Rate limiting
2. API discovery
3. Certificate management
4. URL rewriting

Correct Answer: 1. Rate limiting

Explanation :-

Rate limiting controls the frequency or volume of requests allowed under defined conditions. FortiWeb can use rate-based controls to reduce excessive traffic from clients and help protect application resources from abusive or automated request patterns. Depending on the configured policy, requests exceeding a threshold may be blocked, logged, or otherwise handled. API discovery identifies application endpoints, certificate management handles digital certificates, and URL rewriting transforms requested URLs. Rate limiting is therefore the feature most directly associated with restricting the number of requests received during a specified period. Proper thresholds should reflect normal application usage so legitimate users are not unnecessarily affected by the security policy.

Question 376. Which FortiWeb feature can help protect session cookies by preventing unauthorized modification or tampering?

1. Cookie security
2. DNS forwarding
3. Static routing
4. Server load balancing

Correct Answer: 1. Cookie security

Explanation :-

Cookie security provides mechanisms for protecting cookies used by web applications. Session cookies can be important because they may identify authenticated users or maintain application state. If an attacker can manipulate a session-related cookie, the application’s security may be affected. FortiWeb can apply cookie-related protections according to the configured security policy and application behavior. DNS forwarding handles DNS requests, static routing determines network paths, and server load balancing distributes traffic among backend systems. Cookie security is therefore the relevant feature when the objective is to protect application cookies against unauthorized manipulation. Administrators should ensure that cookie protection settings remain compatible with legitimate application sessions.

Question 377. Which FortiWeb capability provides visibility into APIs discovered from observed application traffic?

1. API discovery
2. Traffic shaping
3. SSL certificate management
4. Backend health monitoring

Correct Answer: 1. API discovery

Explanation :-

API discovery analyzes application traffic to identify APIs and provide administrators with visibility into the endpoints being used. This can be particularly valuable when an organization has incomplete API documentation or when APIs have been introduced without being formally recorded. The discovered information can help administrators understand the application’s API attack surface and support subsequent protection and policy configuration. Traffic shaping manages traffic characteristics, SSL certificate management handles certificates, and backend health monitoring checks server availability. API discovery therefore provides the visibility required to identify API endpoints from observed traffic and can support more informed API security administration.

Question 378. An administrator wants FortiWeb to reject requests that contain an HTTP method not required by the protected application. Which control should be configured?

1. HTTP method enforcement
2. IP reputation
3. Web cache
4. Server health check

Correct Answer: 1. HTTP method enforcement

Explanation :-

HTTP method enforcement allows administrators to specify which HTTP methods are permitted for an application or resource. If an application does not require a particular method, restricting it can reduce unnecessary exposure and prevent clients from performing unsupported operations. For example, an application might need GET and POST while having no legitimate reason to accept DELETE or other methods. IP reputation evaluates source addresses, web caching improves content delivery, and server health checks monitor backend availability. HTTP method enforcement directly addresses the requirement by allowing FortiWeb to reject requests using methods that are not included in the permitted set.

Question 379. Which FortiWeb capability can identify deviations from normal application traffic behavior rather than relying only on known attack signatures?

1. Machine learning-based anomaly detection
2. Static routing
3. DNS forwarding
4. Certificate renewal

Correct Answer: 1. Machine learning-based anomaly detection

Explanation :-

Machine learning-based anomaly detection can identify unusual application behavior by analyzing traffic patterns and comparing activity against established expectations. Unlike traditional signature-based detection, which primarily looks for known attack patterns, anomaly detection can help identify behavior that differs from an established baseline. This can provide additional visibility into suspicious activity that may not match an existing signature. Static routing controls network forwarding, DNS forwarding handles name resolution, and certificate renewal manages digital certificates. Anomaly detection should be tuned to the protected application’s normal behavior because legitimate changes in traffic patterns can otherwise generate unexpected detections or alerts.

Question 380. Which FortiWeb feature allows administrators to control access to application resources based on configured URL rules?

1. URL access control
2. SSL offloading
3. File compression
4. Backend health checking

Correct Answer: 1. URL access control

Explanation :-

URL access control allows administrators to define rules governing access to specific URLs or application resources. These rules can be used to permit or restrict requests according to the application’s security requirements. This is useful for protecting sensitive paths, restricting access to administrative resources, or preventing users from reaching application locations that should not be publicly available. SSL offloading handles encrypted connections, file compression reduces transferred content size, and backend health checking monitors server availability. URL access control therefore provides the direct mechanism for enforcing access restrictions based on application URLs and helps administrators reduce unnecessary exposure of protected resources.