Courseiva
Advanced Threat ProtectionmediumMultiple ChoiceObjective-mapped

NSE7 Advanced Threat Protection Practice Question

An organization uses FortiWeb to protect its web applications. The security team wants to block requests that contain a specific custom pattern in the URL. Which feature should be used?

⚠ Common exam trap

Test-takers frequently confuse URL Access Rules (which control access based on URL paths) with Custom Attack Signatures (which detect arbitrary patterns in the URL), leading them to select URL Access Rule when the requirement is to block a specific custom pattern, not to restrict access to a directory.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Custom Attack Signature

Custom Attack Signatures in FortiWeb allow administrators to define user-specific patterns to match against HTTP request elements, including the URL. This feature is designed to block requests containing custom patterns, such as a specific string in the URL, by inspecting the request and triggering an action (e.g., alert or block) when the pattern is matched. Unlike other features, Custom Attack Signatures provide the granularity needed to detect and block arbitrary, organization-defined patterns in the URL.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Inline Protection Profile

    Why it's wrong here

    Inline profiles include signatures but custom ones are separate.

  • Custom Attack Signature

    Why this is correct

    Custom signatures define patterns to block.

  • URL Access Rule

    Why it's wrong here

    URL access rules control access based on source/destination, not pattern matching.

  • Web Application Firewall Policy

    Why it's wrong here

    Policy applies profiles, but custom patterns are in signatures.

About these practice questions

This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.