Valid NSE5_FWB_AD-8.0 Dumps shared by EduDump.com for Helping Passing NSE5_FWB_AD-8.0 Exam! EduDump.com now offer the newest NSE5_FWB_AD-8.0 exam dumps, the EduDump.com NSE5_FWB_AD-8.0 exam questions have been updated and answers have been corrected get the newest EduDump.com NSE5_FWB_AD-8.0 dumps with Test Engine here:
A FortiWeb administrator sees the following request: GET /api/v1/data HTTP/1.1 Host: example.com Authorization: ApiKey abc123def456 The API key belongs to a user in group B who is authorized to access only /api/v1/reports. What should the administrator do to prevent this unauthorized access?
Correct Answer: A
The problem is not that the API key is invalid; the key belongs to a real user. The issue is authorization scope: group B is allowed only to access /api/v1/reports, but the request targets /api/v1/data. The correct FortiWeb control is API gateway rule enforcement using API key verification and API user grouping. FortiWeb can restrict API access by user group, sub-URL, API key verification, and configured violation actions. Blocking the endpoint for every group is too broad, moving the user to another group grants unnecessary privilege, and allowing all API keys to access all endpoints destroys endpoint-level authorization. The correct fix is group- based access control on /api/v1/data.
