NSE7 Advanced Threat Protection Practice Question
An organization uses FortiWeb to protect its web applications. The security team wants to block requests that contain a specific custom pattern in the URL. Which feature should be used?
⚠ Common exam trap
Test-takers frequently confuse URL Access Rules (which control access based on URL paths) with Custom Attack Signatures (which detect arbitrary patterns in the URL), leading them to select URL Access Rule when the requirement is to block a specific custom pattern, not to restrict access to a directory.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Custom Attack Signature
Custom Attack Signatures in FortiWeb allow administrators to define user-specific patterns to match against HTTP request elements, including the URL. This feature is designed to block requests containing custom patterns, such as a specific string in the URL, by inspecting the request and triggering an action (e.g., alert or block) when the pattern is matched. Unlike other features, Custom Attack Signatures provide the granularity needed to detect and block arbitrary, organization-defined patterns in the URL.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Inline Protection Profile
Why it's wrong here
Inline profiles include signatures but custom ones are separate.
- ✓
Custom Attack Signature
Why this is correct
Custom signatures define patterns to block.
- ✗
URL Access Rule
Why it's wrong here
URL access rules control access based on source/destination, not pattern matching.
- ✗
Web Application Firewall Policy
Why it's wrong here
Policy applies profiles, but custom patterns are in signatures.
Go deeper
Related to this question
About these practice questions
This NSE7 question is part of Courseiva's 940-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This NSE7 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE7 exam.