A client is trying to start a session from a page that would normally be accessible only after the client has logged in. When a start page rule detects the invalid session access, what can FortiWeb…

The correct answer is B. Redirect the client to the login page C. Allow the page access, but log the violation E. Reply with a 403 Forbidden HTTP error. You've hit your limit · resets 5am (America/New_York)

Policy Configuration and Web Application Protection

Question

A client is trying to start a session from a page that would normally be accessible only after the client has logged in. When a start page rule detects the invalid session access, what can FortiWeb do? (Choose three.)

Options

ADisplay an access policy message, then allow the client to continue
BRedirect the client to the login page
CAllow the page access, but log the violation
DPrompt the client to authenticate
EReply with a 403 Forbidden HTTP error

How the community answered

(56 responses)

A
4% (2)
B
88% (49)
D
9% (5)

Explanation

You've hit your limit · resets 5am (America/New_York)

Topics

#start page rules#session management#HTTP response actions#access control

Community Discussion

No community discussion yet for this question.

Full NSE6_FWB-6.4 Practice