NSE5_FWB_AD-8.0 무료 덤프문제 온라인 액세스

Refer to the exhibit.

What is does the exhibit show?

• A.The FortiGate UI interface in HTML.
• B.An API schema file.
• C.A sample response returned by the FortiGate API at https://fortigate.com/ui.
• D.The result of a show ui details command on a FortiWeb server.

Which statement best describes the purpose of FortiWeb's "combination access control" rules?

• A.They merge server pools from separate virtual servers.
• B.They combine HA cluster members into a single logical unit.
• C.They combine multiple individual match conditions (such as source IP, geography, and HTTP header) into a single rule to make more precise access decisions.
• D.They merge SSL certificates from multiple vendors into one chain.

A third-party penetration test reveals that users can bypass login controls through a mobile API.
Your current FortiWeb configuration includes zero trust network access (ZTNA) profiles and cookie security, but API protection and client management are not enabled. The security team asks you to recommend the most effective way to close this gap. Which FortiWeb adjustment would best prevent future unauthorized API access?

• A.Replace ZTNA with bot protection to reduce false positives.
• B.Log only API traffic and rely on FortiAnalyzer for future alerts.
• C.Switch to a reverse-proxy mode to bypass cookie-based controls.
• D.Enable API protection and client management to enforce identity checks on mobile API traffic.

You are a FortiWeb administrator investigating an SQL injection attack on your company's customer portal. The network firewall and intrusion prevention system (IPS) did not stop the attack.
You decide to deploy a web application firewall (WAF) to help prevent this type of attack.
Which two actions can you take to block application-layer threats? (Choose two.)

• A.Focus on client-side risks, such as protecting user browsers.
• B.Inspect general network traffic equally between clients and servers.
• C.Detect and block threats like SQL injection, cross-site scripting (XSS), and other layer 7 attacks.
• D.Filter and analyze HTTP/S requests to block attacks targeting the web server.

An administrator is troubleshooting why FortiWeb is not decrypting HTTPS traffic for inspection in reverse proxy mode. What is the most likely missing configuration?

• A.An HA heartbeat interface
• B.A DNS resolver setting
• C.A static route to the internet
• D.A local certificate and private key bound to the virtual server for SSL offloading