最新のNSE5_FWB_AD-8.0問題集で試験を準備する

Fortinet NSE5_FWB_AD-8.0 試験概要:

Fortinet NSE5_FWB_AD-8.0 試験シラバストピック:

Fortinet NSE 5 - FortiWeb 8.0 Administrator 認定 NSE5_FWB_AD-8.0 試験問題：

1. You are reviewing a report from your FortiWeb logs and notice a JavaScript payload like < script > document.
cookie < /script > is submitted through a product review form. The page doesn't filter the script, and when users view the review, their session cookies are exposed.
Why is this attack dangerous?

A) It forces a victim to click malicious links.
B) It bypasses login pages.
C) It executes code in the victim's browser.
D) It leaks back-end database information.

2. You are configuring the FortiWeb client-side protection feature to defend against browser-based attacks.
Based on the layered defense strategy, drag and drop each control to the corresponding stage of defense.

3. A FortiWeb administrator wants to create a machine learning (ML)-based bot detection system.
Which three actions must the administrator take to build and activate this ML model? (Choose three.)

A) Apply Bayesian analysis to the model output.
B) Run the model in the live environment.
C) Verify the model manually on test data only.
D) Build the detection model using collected data.
E) Collect traffic samples for training.

4. Refer to the exhibits.


A new domain, https://finance.fortinet.demo, was added but not explicitly mapped. Users report the site loads correctly, but you're unsure which back-end server is being used.
Why is this request succeeding despite no explicit routing rule for finance.fortinet.demo?

A) The connection is passed to FortiGate for secondary routing.
B) The inherited certificate has a wildcard entry for all subdomains.
C) The request defaults to app_server_1 because it is marked as the default route.
D) FortiWeb auto-generates fallback policies for new domains.

質問と回答：