NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ10

VerifiedWeb application and API security with botnet mitigation

A user in group B sends 150 requests within one minute to this endpoint:

Question Image

Group B users may access only /api/v1/reports and are limited to 50 requests per minute. What should the FortiWeb administrator configure to stop this abuse?

Explanation

Group-based rate limiting enforces the 50-requests-per-minute limit for group B, preventing the user from sending 150 requests in one minute. The request also targets /api/v1/data, whereas group B is authorized only for /api/v1/reports; access controls should separately deny that unauthorized endpoint.

Community Discussion

No comments yet. Be the first to start the discussion!