NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ30

VerifiedDeployment and configuration

You are configuring FortiWeb client-side protection to protect against browser-based attacks.

Based on the layered-defense strategy, place each control in its corresponding defense stage.

Drag & Drop
Stage 1 – Prevent attacks before they happen
Stage 2 – Detect tampering at runtime
Stage 3 – Mitigate after the browser is compromised
Explanation

CORS is enforced by browsers to prevent unauthorized cross-origin access. Subresource Integrity checks a loaded external resource against an expected cryptographic hash, detecting runtime tampering. A follow-up HTTP header request enables the service to respond after compromise has been identified.

Community Discussion

No comments yet. Be the first to start the discussion!