View Full Fortinet NSE5_FWB_AD-8.0 Exam Dumps and Practice Test Dumps

 

Question 381. An administrator wants FortiWeb to block requests when the HTTP request body exceeds the configured maximum size. Which security feature should be configured?

1. HTTP protocol constraints
2. IP reputation
3. Cookie security
4. URL rewriting

Correct Answer: 1. HTTP protocol constraints

Explanation :-

HTTP protocol constraints allow FortiWeb to enforce limits and requirements associated with HTTP requests and responses. One important use is controlling request-body size so oversized requests can be rejected before they consume excessive application resources. This can help reduce abuse involving unusually large requests and can also enforce application-specific HTTP requirements. IP reputation addresses the reputation of client addresses, cookie security protects cookie handling, and URL rewriting changes request or response URLs. Therefore, when the objective is to control the maximum size of an HTTP request body, HTTP protocol constraints provide the appropriate control.

Question 382. A web application uses an API that should accept only GET and POST requests. Which FortiWeb feature can enforce this requirement?

1. IP reputation
2. HTTP method enforcement
3. Server health check
4. URL rewriting

Correct Answer: 2. HTTP method enforcement

Explanation :-

HTTP method enforcement allows administrators to control which HTTP methods are permitted for protected applications or resources. If an API is designed to use only GET and POST, allowing methods such as PUT, DELETE, PATCH, or TRACE may unnecessarily increase the attack surface. By restricting methods to those required by the application, FortiWeb can reject requests using unauthorized methods. IP reputation evaluates client IP reputation, health checks monitor backend availability, and URL rewriting modifies URL information. Therefore, HTTP method enforcement is the appropriate feature for limiting the allowed HTTP methods.

Question 383. An administrator needs to protect an application from clients repeatedly submitting excessive requests within a short period. Which FortiWeb capability is most appropriate?

1. Cookie security
2. API discovery
3. Rate limiting
4. URL rewriting

Correct Answer: 3. Rate limiting

Explanation :-

Rate limiting controls how frequently clients can send requests to a protected application or resource during a defined period. It is useful when administrators need to reduce excessive request rates that may consume application resources or contribute to application-layer denial-of-service conditions. Rate limiting can be applied according to the relevant traffic criteria and configured thresholds. Cookie security focuses on protecting cookie behavior, API discovery identifies API endpoints, and URL rewriting modifies URL structures. Therefore, when the requirement is to restrict clients that submit too many requests in a short time, rate limiting is the appropriate FortiWeb capability.

Question 384. A company wants FortiWeb to identify suspicious SQL syntax embedded in parameters submitted to a web application. Which protection should be used?

1. Server health check
2. IP reputation
3. HTTP method enforcement
4. SQL injection protection

Correct Answer: 4. SQL injection protection

Explanation :-

SQL injection protection is designed to detect and block malicious input that attempts to manipulate database queries through application parameters. Attackers may insert SQL syntax into fields such as usernames, search parameters, form values, or URL parameters. FortiWeb can inspect application traffic and apply SQL injection detection according to configured policies. Server health checks are intended to monitor backend servers, IP reputation evaluates the reputation of source addresses, and HTTP method enforcement controls permitted HTTP methods. Therefore, SQL injection protection directly addresses the requirement to identify suspicious SQL syntax in application input.

Question 385. An administrator wants FortiWeb to identify clients associated with known malicious or suspicious IP addresses. Which feature should be configured?

1. IP reputation
2. API schema validation
3. URL rewriting
4. Cookie security

Correct Answer: 1. IP reputation

Explanation :-

IP reputation evaluates client IP addresses against reputation information to help identify sources associated with malicious or suspicious activity. This can allow FortiWeb to take action against requests originating from addresses with poor reputation before the requests reach the protected application. API schema validation instead checks API requests against defined schemas, URL rewriting changes URL information, and cookie security focuses on protecting cookies and their attributes. Therefore, when the administrator’s objective is to identify traffic originating from known malicious or suspicious IP addresses, IP reputation is the relevant FortiWeb capability.

Question 386. A web application requires users to authenticate through an HTML login form before accessing protected content. Which authentication mechanism is appropriate?

1. IP reputation authentication
2. Form-based authentication
3. API discovery authentication
4. Health-check authentication

Correct Answer: 2. Form-based authentication

Explanation :-

Form-based authentication is designed for applications where users provide credentials through a web form, commonly an HTML login page. FortiWeb can use authentication mechanisms to control access to protected resources and integrate the authentication process with the application’s expected login workflow. IP reputation is used to evaluate client addresses rather than authenticate users. API discovery identifies API endpoints, while health checks determine backend availability. Therefore, when users must authenticate through a web-based login form before accessing protected application content, form-based authentication is the appropriate mechanism.

Question 387. An administrator wants FortiWeb to discover API endpoints by observing traffic before creating specific API protection rules. Which capability should be used?

1. Cookie security
2. URL rewriting
3. API discovery
4. IP reputation

Correct Answer: 3. API discovery

Explanation :-

API discovery allows FortiWeb to identify API endpoints by analyzing application traffic and observing how APIs are being used. This can help administrators understand the application’s API surface before creating more specific API protection policies. Discovery is particularly useful when documentation is incomplete or when administrators need visibility into APIs that are actively exposed by an application. Cookie security focuses on cookies, URL rewriting modifies URL information, and IP reputation evaluates the reputation of client addresses. Therefore, API discovery is the appropriate capability when the goal is to identify API endpoints through observed application traffic.

Question 388. A security administrator wants FortiWeb to inspect encrypted HTTPS traffic so application-layer security policies can be applied to the decrypted requests. Which deployment function is required?

1. URL rewriting
2. SSL/TLS termination
3. IP reputation
4. API discovery

Correct Answer: 2. SSL/TLS termination

Explanation :-

SSL/TLS termination allows FortiWeb to terminate an encrypted HTTPS connection, decrypt the traffic, inspect the application-layer content, and then process the request according to configured security policies. Without access to the decrypted HTTP content, many application-layer protections cannot inspect the actual request data. URL rewriting changes URL information, IP reputation evaluates source addresses, and API discovery identifies API endpoints. Therefore, when FortiWeb must inspect HTTPS requests at the application layer, SSL/TLS termination is an essential deployment function.

Question 389. A company wants to prevent users from uploading files larger than the application’s defined limit. Which FortiWeb protection is most relevant?

1. File security controls
2. IP reputation
3. Cookie security
4. API discovery

Correct Answer: 1. File security controls

Explanation :-

File security controls can be used to inspect and restrict uploaded files according to configured security requirements. File-related policies can help organizations control characteristics such as permitted file types and upload constraints, depending on the configured FortiWeb policy. Restricting uploads is useful for reducing the risk associated with malicious files and preventing inappropriate resource consumption. IP reputation evaluates source addresses, cookie security protects cookie handling, and API discovery identifies APIs. Therefore, when the requirement concerns controlling file uploads and their permitted characteristics, file security controls are the appropriate feature.

Question 390. An administrator needs to determine whether a protected backend web server is reachable and responding before FortiWeb forwards production traffic to it. Which feature should be configured?

1. SQL injection protection
2. API discovery
3. Server health check
4. URL access control

Correct Answer: 3. Server health check

Explanation :-

A server health check allows FortiWeb to monitor the availability and responsiveness of backend servers. Health checks can help determine whether a server is capable of handling traffic before it is selected for application requests. This is particularly important in environments where multiple backend servers are available and traffic should be directed only toward healthy members. SQL injection protection detects malicious database-related input, API discovery identifies API endpoints, and URL access control determines whether clients may access specific resources. Therefore, a server health check is the appropriate feature for monitoring backend server availability.

Question 391. An administrator wants to restrict access to a sensitive administrative URL so that only approved clients can reach it. Which FortiWeb feature should be used?

1. URL access control
2. IP reputation
3. API discovery
4. File security

Correct Answer: 1. URL access control

Explanation :-

URL access control allows administrators to define rules controlling access to specific URLs or application resources. This is useful for protecting sensitive paths such as administrative interfaces, restricted application functions, or other resources that should not be available to every client. Policies can be designed around the application’s access requirements and configured conditions. IP reputation evaluates the reputation of source addresses, API discovery identifies APIs, and file security focuses on uploaded files. Therefore, when the objective is to control access to a particular sensitive URL, URL access control is the appropriate FortiWeb feature.

Question 392. A web application changes the structure of incoming URLs and requires FortiWeb to transform requests to match the backend server’s expected URL format. Which capability is relevant?

1. Rate limiting
2. URL rewriting
3. SQL injection protection
4. IP reputation

Correct Answer: 2. URL rewriting

Explanation :-

URL rewriting allows FortiWeb to modify URL information according to configured rules. This can be useful when the externally visible URL structure differs from the URL structure expected by backend application servers. Rewriting can help applications maintain a particular public URL design while forwarding requests in a form understood by the backend. Rate limiting controls request frequency, SQL injection protection detects malicious database-related input, and IP reputation evaluates source addresses. Therefore, when FortiWeb must transform incoming URLs so that they conform to the backend application’s expected structure, URL rewriting is the relevant capability.

Question 393. An API requires every request to contain specific fields and follow a defined schema. Which FortiWeb capability can validate the request structure?

1. Cookie security
2. IP reputation
3. API schema validation
4. Server health check

Correct Answer: 3. API schema validation

Explanation :-

API schema validation checks API requests against a defined structure or schema. It can help verify that requests contain the expected fields and follow the required data format before they are processed by the backend application. This provides an additional layer of protection against malformed or unexpected API requests and can help enforce the intended API contract. Cookie security protects cookie handling, IP reputation evaluates source-address reputation, and server health checks monitor backend availability. Therefore, API schema validation is the appropriate capability when the requirement is to verify that API requests conform to a predefined schema.

Question 394. An administrator wants FortiWeb to protect session cookies by ensuring they use appropriate security attributes. Which feature addresses this requirement?

1. URL rewriting
2. Rate limiting
3. Cookie security
4. API discovery

Correct Answer: 3. Cookie security

Explanation :-

Cookie security provides controls for protecting cookies used by web applications. Security attributes associated with cookies can help reduce risks involving session information, including unauthorized access or unintended exposure of cookies. Proper cookie handling is particularly important for applications that rely on session cookies for authentication and user state. URL rewriting changes URL information, rate limiting controls request frequency, and API discovery identifies API endpoints. Therefore, when the requirement specifically concerns applying security controls to application cookies, cookie security is the relevant FortiWeb feature.

Question 395. An administrator observes that an application is receiving a large number of abnormal requests that differ significantly from normal traffic patterns. Which FortiWeb capability can help identify anomalous behavior?

1. Machine learning-based anomaly detection
2. URL rewriting
3. Server health check
4. Cookie security

Correct Answer: 1. Machine learning-based anomaly detection

Explanation :-

Machine learning-based anomaly detection can help identify traffic patterns that deviate from behavior considered normal for an application. Rather than relying exclusively on fixed signatures, anomaly-based techniques can use observed traffic characteristics to identify unusual requests or behavioral patterns. This can provide an additional detection mechanism for applications where malicious activity may not exactly match known attack signatures. URL rewriting modifies URLs, server health checks monitor backend availability, and cookie security protects cookie handling. Therefore, when the objective is to identify requests that significantly deviate from normal application behavior, machine learning-based anomaly detection is the appropriate capability.

Question 396. A security policy requires FortiWeb to reject requests containing an HTTP method that the application does not support. Which control should be configured?

1. IP reputation
2. HTTP method enforcement
3. File security
4. API discovery

Correct Answer: 2. HTTP method enforcement

Explanation :-

HTTP method enforcement allows administrators to specify which HTTP methods are permitted for an application or protected resource. If an application supports only selected methods, requests using unsupported methods can be rejected before reaching the backend. Restricting methods helps reduce unnecessary attack surface and prevents clients from using HTTP operations that the application was not designed to process. IP reputation focuses on source-address reputation, file security addresses uploaded files, and API discovery identifies API endpoints. Therefore, HTTP method enforcement directly satisfies the requirement to reject requests containing unsupported HTTP methods.

Question 397. An administrator needs to identify and block a known web attack pattern for which FortiWeb already has a predefined signature. Which detection mechanism should be used?

1. Server health check
2. Signature-based detection
3. URL rewriting
4. API discovery

Correct Answer: 2. Signature-based detection

Explanation :-

Signature-based detection identifies traffic by comparing it against known attack patterns represented by signatures. This approach is effective when the attack type has an established and recognizable pattern that can be matched against incoming requests. FortiWeb can use security signatures to detect known application-layer threats and take the configured action when a match occurs. Server health checks monitor backend availability, URL rewriting changes URL information, and API discovery identifies API endpoints. Therefore, when a known web attack corresponds to an existing predefined signature, signature-based detection is the appropriate mechanism.

Question 398. A company wants to prevent unauthorized access to a web application’s administrative path based on defined access rules. Which FortiWeb feature should be used?

1. URL access control
2. Cookie security
3. API schema validation
4. Rate limiting

Correct Answer: 1. URL access control

Explanation :-

URL access control provides a mechanism for restricting access to specific application URLs according to configured policy conditions. Administrative paths often contain sensitive functions and therefore may require more restrictive access than ordinary application pages. By defining access rules for the relevant URL, FortiWeb can enforce the organization’s intended access requirements before requests reach the protected resource. Cookie security focuses on cookies, API schema validation checks API request structures, and rate limiting controls request frequency. Therefore, when the requirement is to enforce authorization rules for an administrative URL, URL access control is the relevant feature.

Question 399. An administrator wants to reduce the impact of repeated application requests from a client that exceeds an established request threshold. Which capability should be configured?

1. API discovery
2. URL rewriting
3. Rate limiting
4. Server health check

Correct Answer: 3. Rate limiting

Explanation :-

Rate limiting allows FortiWeb to restrict the number or frequency of requests that clients can make according to configured thresholds. It is useful for controlling excessive application traffic and reducing the impact of clients that generate unusually high request volumes. This can help protect application resources from abusive or excessive request activity. API discovery identifies API endpoints, URL rewriting transforms URL information, and server health checks monitor backend server availability. Therefore, when an administrator needs to reduce the impact of clients exceeding an established request threshold, rate limiting is the appropriate capability.

Question 400. A security administrator wants to identify API endpoints that are actually being used by an application so protection policies can be created around the observed API surface. Which feature should be selected?

1. IP reputation
2. Cookie security
3. API discovery
4. HTTP method enforcement

Correct Answer: 3. API discovery

Explanation :-

API discovery provides visibility into APIs by identifying endpoints through observed application traffic. This can help administrators understand which API resources are actually exposed and being accessed, particularly when existing API documentation is incomplete or outdated. Once the API surface is understood, administrators can use that information to create appropriate API security policies. IP reputation evaluates client IP addresses, cookie security protects application cookies, and HTTP method enforcement controls permitted HTTP methods. Therefore, when the objective is to identify API endpoints based on observed traffic before developing targeted protection policies, API discovery is the appropriate FortiWeb capability.