NSE 5 - FortiWeb 8.0 Administrator Exam Materials - Question #29 Discussion

You are a FortiWeb administrator investigating an SQL injection attack on your company’s customer portal. The network firewall and intrusion prevention system (IPS) did not stop the attack. You decide to deploy a web application firewall (WAF) to help prevent this type of attack. Which two actions can you take to block application-layer threats? (Choose two answers)

• A. Inspect general network traffic equally between clients and servers.
• B. Filter and analyze HTTP/S requests to block attacks targeting the web server.
• C. Focus on client-side risks, such as protecting user browsers.
• D. Detect and block threats like SQL injection, cross-site scripting (XSS), and other layer 7 attacks.

Brave-Dump Community Votes