NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ29

VerifiedWeb application and API security with botnet mitigation

A FortiWeb administrator reviews protection effectiveness after a surge in malicious traffic reveals design flaws and misconfigurations in several web applications.

For each listed Open Web Application Security Project (OWASP) risk, choose the FortiWeb feature that provides the most strategic protection, considering coverage depth and operational effectiveness.

Match the most appropriate FortiWeb feature to each OWASP issue.

Drag & Drop
A01: Broken Access Control
A03: Injection
A04: Insecure Design
A05: Security Misconfiguration
Explanation

Site publish implements access control and centralized authentication/SSO, addressing broken access control. Parameter validation restricts request inputs and blocks invalid values used in injection attempts. Web vulnerability scanning identifies known application vulnerabilities for remediation, making it the best available strategic control for insecure design. HSTS forces browsers to use HTTPS, addressing an important missing security-header configuration. WebSocket protocol constraints apply specifically to WebSocket traffic and are not the best match for these listed risks.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!