You are reviewing a report from your FortiWeb logs and notice a JavaScript payload like
<script>document.cookie</script> submitted through a product review form. The page doesn't filter the script, and users who view the review have their session cookies exposed. Which type of attack does this scenario represent?

• A.cross-site request forgery (CSRF)
• B.Cross-site scripting (XSS)
• C.Broken authentication
• D.SQL injection (SQLi)

Comment: *

Name: *

Email: *

Verification: *

You are a FortiWeb administrator investigating an SQL injection attack on your company's customer portal.
The network firewall and intrusion prevention system (IPS) did not stop the attack.
You decide to deploy a web application firewall (WAF) to help prevent this type of attack.
Which two actions can you take to block application-layer threats? (Choose two.)

• A.Focus on client-side risks, such as protecting user browsers.
• B.Inspect general network traffic equally between clients and servers.
• C.Detect and block threats like SQL injection, cross-site scripting (XSS), and other Layer 7 attacks.
• D.Filter and analyze HTTP/S requests to block attacks targeting the web server.

Comment: *

Name: *

Email: *

Verification: *

A FortiWeb administrator needs to allow a known web indexer to scan the website for search engine visibility.
What is the easiest way to allow this on FortiWeb?

• A.Add the web indexer IP address to the trusted IP address list.
• B.Add the web indexer IP address to an IP exception list inside the inline protection profile.
• C.Add the web indexer IP address to the FortiGuard Known Search Engines category.
• D.Add the web indexer user-agent string to a custom signature exception rule.

Comment: *

Name: *

Email: *

Verification: *

You are hosting multiple secure web applications behind a single public IP address on FortiWeb.
When a client connects to a service, FortiWeb needs to:
* Identify the correct SSL certificate.
* Decrypt the request.
* Route the request to the correct back-end server.
Match each FortiWeb function to the request handling step that performs the function.

Correct Answer:

Explanation:

When multiple HTTPS applications share one public IP address, the client begins the TLS connection and includes the requested hostname in the SNI field. FortiWeb uses SNI-based certificate selection to choose the appropriate certificate for that hostname. After presenting the correct certificate and completing the TLS handshake, FortiWeb decrypts the HTTPS session so it can inspect HTTP content. Content inspection then evaluates the host header and URL path, which are needed for application-aware routing decisions. Finally, intelligent traffic routing forwards the request to the correct back-end server or server pool. The sequence matters: FortiWeb cannot inspect the host and URL path or route by content until the HTTPS session is terminated and decrypted.

Comment: *

Name: *

Email: *

Verification: *

A FortiWeb administrator needs to distribute traffic geographically across data centers in different regions for disaster recovery and performance. Which feature accomplishes this?

• A.Global server load balancing (GSLB)
• B.Local server pool
• C.HTTP content routing
• D.Protocol constraint profile

Comment: *

Name: *

Email: *

Verification: *