最新のNSE5_FWB_AD-8.0問題集で試験を準備する

A FortiWeb administrator needs to protect new API endpoints that a development team is publishing. To secure these API endpoints, which three configuration actions should the administrator perform on FortiWeb? (Choose three.)

• A. Apply API schema validation to incoming requests.
• B. Activate SAML authentication for general user access.
• C. Configure Active Directory (AD) single sign-on (SSO) for the web portal.
• D. Enable machine learning (ML)-based API protection.
• E. Enforce API user key requirements in the API policy.

While reviewing FortiWeb logs, you notice a suspicious login request that failed authentication.
You suspect it may be part of an injection attack targeting the login form. Which input pattern is an example of a typical SQL injection attempt that could bypass authentication checks?

• A. <sql>select(ALL USERS);</sql>
• B. '||(SELECT password FROM users WHERE role='admin')||'
• C. SELECT username FROM accounts WHERE username='admin';-- ' AND password='password';
• D. <script>document.location='/steal?cookie='+document.cookie</script>

Which URL should you rewrite to reduce security risk?

• A. https://www.example.com/products/today
• B. https://www.example.com/about/team
• C. https://www.example.com/wordpress/?feed=rss2
• D. https://www.example.com/25.3.6/Browse/MediaData

A FortiWeb administrator needs to distribute traffic geographically across data centers in different regions for disaster recovery and performance. Which feature accomplishes this?

• A. Protocol constraint profile
• B. Global server load balancing (GSLB)
• C. HTTP content routing
• D. Local server pool

Your security team is reviewing tools for artificial intelligence (AI) integration and wants to ensure no real user or IP data is exposed to third-party services. How does FortiAI meet this requirement better than traditional external AI tools?

• A. Only masked prompts go to the LLM; unmasking happens locally.
• B. FortiAI blocks all network access during queries.
• C. The large language model (LLM) receives IP addresses from only the internal DNS.
• D. It encrypts data using a cloud-based key.