NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ50

VerifiedCompliance and troubleshooting

A FortiWeb administrator is reviewing issues identified during a security audit. The audit identifies shortcomings based on behavior, configuration, and data protection.

The administrator must categorize the findings and match them to the appropriate FortiWeb feature.

Drag & Drop
A01: Broken Access Control
A02: Cryptographic Failures
A04: Insecure Design
A05: Security Misconfiguration
Explanation

User Tracking associates authenticated users with their session IDs and supports session controls, which helps enforce access-related protections. Padding Oracle Protection mitigates padding-oracle attacks, an OWASP A02 cryptographic failure. Web Vulnerability Scan discovers application weaknesses during development and assessment, supporting identification of insecure design. HSTS Header Security enforces HTTPS through a security header; absent or insecure security headers are an OWASP A05 security misconfiguration. Session Forwarding does not match one of the displayed targets.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!