Fortinet NSE 5 - FortiWeb 8.0 Administrator - NSE5_FWB

QUESTION NO: 1
Your e-commerce platform is experiencing frequent SQL injection attempts. You need FortiWeb to actively inspect, enforce, and block attacks inline before traffic reaches the web servers.
The deployment must support the full FortiWeb security feature set without operational limitations, including protocol validation, attack detection, and policy enforcement.
Which FortiWeb operation mode should you configure to proactively intercept and block threats such as SQL injection attempts?

A. Reverse proxy B. Offline protection C. Web Cache Communication Protocol (WCCP) integration mode D. Transparent bridge mode

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
An administrator is troubleshooting why FortiWeb is not decrypting HTTPS traffic for inspection in reverse proxy mode. What is the most likely missing configuration?

A. A local certificate and private key bound to the virtual server for SSL offloading B. A DNS resolver setting C. A static route to the internet D. An HA heartbeat interface

Correct Answer: A

QUESTION NO: 3
Which statement about FortiWeb's "Auto Learning" (or "Auto-learn") profile is correct?

A. It requires a separate hardware appliance. B. It passively monitors and profiles traffic to build a baseline that administrators can later use to fine-tune protection rules. C. It permanently blocks all traffic during the learning period. D. It disables all other security profiles while active.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
You are setting up a FortiWeb policy to protect a customer login portal. Users connect to
https://login.training.lab, and you want FortiWeb to forward those requests to a load-balanced pool of back-end servers. Which three components must you configure to complete the server policy?

A. DNS resolver, URL rewrite rule, and HTTP health check B. Virtual server, server pool, and port settings (service) C. Web application firewall (WAF) profile, DoS policy, and server name indication (SNI)-based certificate D. Real server, IPsec tunnel, and static route

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Drag and Drop Question
A FortiWeb administrator is reviewing protection effectiveness after a surge in malicious traffic exposed design flaws and misconfigurations in several web applications.
For each Open Web Application Security Project (OWASP) risk listed, choose the FortiWeb feature that offers the most strategic protection, considering both coverage depth and operational effectiveness.
Match the most appropriate FortiWeb feature to each OWASP issue.
Select each FortiWeb feature in the left column, hold and drag it to the blank space next to the OWASP issue in the column on the right. Once you match a FortiWeb feature to the OWASP issue, you can move it again if you want to change your answer by clicking on the FortiWeb feature. You need to match five FortiWeb features to the OWASP issue in the work area.

Correct Answer:

Explanation:
A01: Broken Access Control → Site publish
A03: Injection → Parameter validation
A04: Insecure Design → Web vulnerability scan
A05: Security Misconfiguration → HSTS header
Site publish helps enforce controlled access to protected applications. Parameter validation restricts unsafe or unexpected input that could be used in injection attacks. Web vulnerability scanning helps identify application weaknesses and design-related exposure before attackers exploit them. HSTS reduces security misconfiguration risk by forcing browsers to use HTTPS for the protected site.

QUESTION NO: 6
Which statement best describes the difference between SAML authentication and HTML authentication in FortiWeb site publishing?

A. SAML authentication uses a passwordless login, while HTML authentication uses tokens. B. SAML authentication is used for internal apps while HTML authentication is used for cloud apps. C. SAML authentication delegates login to an external system, while HTML authenticates directly on FortiWeb. D. SAML authentication encrypts passwords while HTML authentication sends passwords in cleartext format.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
Your company hosts two different web applications: a shopping site and a blog. You want FortiWeb to apply different protection profiles and forwarding rules to each application. How should you configure FortiWeb to support this?

A. Use one server policy with different virtual IP addresses. B. Configure one server pool but assign different firewall policies. C. Create a separate server policy for each application. D. Use source network address translation (SNAT) with web caching to split the requests.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Fortinet NSE 5 - FortiWeb 8.0 Administrator - NSE5_FWB_AD-8.0 Exam Questions