Fortinet NSE5_FWB_AD-8.0 Certification Exam Sample Questions and Answers

FortiWeb Administrator Dumps, NSE5_FWB_AD-8.0 Dumps, Fortinet FortiWeb Administrator PDF, NSE5_FWB_AD-8.0 PDF, FortiWeb Administrator VCE, Fortinet FortiWeb Administrator Questions PDF, Fortinet Exam VCE, Fortinet NSE5_FWB_AD-8.0 VCE, FortiWeb Administrator Cheat SheetBefore you write the Fortinet FortiWeb Administrator (NSE5_FWB_AD-8.0) certification exam, you may have certain doubts in your mind regarding the pattern of the test, the types of questions asked in it, the difficulty level of the questions and time required to complete the questions. These Fortinet NSE 5 Certified - Cloud Security (FortiWeb Administrator) sample questions and demo exam help you in removing these doubts and prepare you to take the test.

The best approach to pass your Fortinet NSE5_FWB_AD-8.0 exam is to challenge and improve your knowledge. To test your learning and identify improvement areas with actual exam format, we suggest you practice with Premium Fortinet NSE5_FWB_AD-8.0 Certification Practice Exam. The practice test is one of the most important elements of your Fortinet NSE 5 - FortiWeb 8.0 Administrator (FortiWeb Administrator) exam study strategy to discover your strengths and weaknesses, to improve your time management skills and to get an idea of the score you can expect.

Fortinet NSE5_FWB_AD-8.0 (FortiWeb Administrator) Sample Questions:

01. In an active-passive FortiWeb cluster, the active unit fails and the passive unit takes over. What should the administrator expect for client sessions, and why is HA still worthwhile?
a) Some in-flight connections may drop and clients reconnect, but overall service availability is preserved
b) Every session is permanently terminated and users must re-enroll a new certificate before they can reconnect to the service
c) Client sessions keep running on the failed unit until its hardware is repaired, replaced, and re-synchronized, so availability depends entirely on repair time
d) All existing connections are carried over with no interruption at all, which is the main reason active-passive HA is deployed
 
02. During an incident, a published application is hit at the same time by a flood of well-formed HTTP requests aimed at an expensive search endpoint and by a high-bandwidth UDP flood that is saturating the upstream internet link.
Which part of this attack is FortiWeb positioned to mitigate, and which belongs upstream?
a) FortiWeb should rate-limit the UDP flood, while the HTTP flood is best absorbed by adding back-end server capacity
b) FortiWeb can mitigate the application-layer HTTP flood by detecting the abnormal request pattern to the endpoint, while the volumetric UDP flood saturating the link must be handled upstream by a network firewall or a scrubbing service
c) FortiWeb can mitigate both, because its DoS prevention inspects all traffic to the protected servers regardless of protocol or layer
d) Neither can be mitigated by FortiWeb, because denial-of-service defense is exclusively a FortiGate and ISP responsibility
 
03. A small number of abusive clients are each sending requests far faster than any human user, degrading response times for everyone, but legitimate users are still browsing at normal rates.
Which configuration most directly blunts the abusive clients while leaving normal users unaffected?
a) A single global connection cap that FortiWeb applies to all incoming traffic at once
b) A new back-end server added to the pool to absorb the extra request volume
c) A signature-based web attack rule that blocks the offending request payloads outright
d) An HTTP access-rate limit applied per source client
 
04. While investigating a suspected incident, an administrator uses FortiAI's summarization across the attack, traffic, and event log views. What does this summarization primarily give the administrator?
a) A consolidated explanation of the activity across the three logs, so related events are grasped faster than reading each separately
b) A rewritten set of server policies generated from the patterns FortiAI found in the combined logs
c) A replacement for the individual logs, which no longer need to be retained once a summary exists
d) A guarantee that every event appearing in the summary has already been fully investigated and remediated by FortiAI before the summary was produced
 
05. After a vulnerability scan, the application team reports that it has fixed a high-severity finding. Before the administrator records the finding as resolved for the compliance report, what is the appropriate final step?
a) Disable the vulnerability scanner for that application so the finding cannot be raised again in future scans
b) Delete the original finding from the scan history so the report shows no outstanding high-severity issues at all
c) Re-scan the affected target to confirm the finding no longer appears
d) Record it as resolved immediately, since the development team's statement that it is fixed is sufficient evidence for the report
 
06. FortiWeb runs in Reverse Proxy mode with SSL offloading, terminating client TLS and forwarding to a back-end pool. The back-end servers sit on a segment that carries regulated data and is shared with systems outside the application's trust boundary.
What should drive the decision to re-encrypt traffic to the backend rather than forward it as plain HTTP?
a) Base the choice on cache-ability, re-encrypting static objects and forwarding dynamic content as HTTP
b) Re-encrypt only when the backend cannot serve HTTPS, speaks a legacy cipher, or lacks a modern certificate, so FortiWeb can convert the plain HTTP into TLS and upgrade the protocol version for it
c) Forward decrypted plain HTTP in every case, because decryption is what lets FortiWeb inspect the request and re-encrypting would hide the payload from the WAF engines again
d) Re-encrypt to the backend when that segment is untrusted or compliance requires encryption in transit, and forward plain HTTP only on a trusted, isolated segment
 
07. Two applications share one public HTTPS address on FortiWeb: requests for app1.example.com must be forwarded to one server pool, and requests whose path begins with /api must go to a different pool. The administrator wants this handled within a single virtual server and server policy.
Which FortiWeb feature accomplishes this?
a) HTTP content routing, which matches request attributes such as the host and URL path and forwards each match to a different server pool while all traffic still enters through the same virtual server and policy
b) A DNS-based split in which FortiWeb returns a different backend address depending on the hostname the client requested
c) A load-balancing health check that measures each member's CPU, connection count, and response time and sends every request to whichever pool member is least loaded, regardless of host or path
d) A separate server policy for every application, because one policy can forward to only a single pool and cannot distinguish requests by host or path
 
08. An administrator notices that requests to a particular hostname are reaching the back-end application but never appear in FortiWeb's attack or traffic logs, and no protection is being applied to them.
What is the most likely cause?
a) A single server policy can inspect only one hostname at a time, so any additional hostnames are always passed through uninspected
b) The requests do not match any server policy's host or service conditions, so no policy applies and they pass uninspected
c) FortiWeb is in an operation mode that silently forwards all traffic without any ability to inspect it
d) The attack log and the traffic log have both been disabled, so the requests are inspected and acted on as normal but the resulting matches are simply never recorded or forwarded anywhere
 
09. Clients connecting to a FortiWeb-published HTTPS site begin receiving certificate warnings and TLS handshake errors, while the back-end servers themselves are healthy and reachable.
Which set of causes should the administrator investigate first?
a) The response compression settings, since compressing an object can corrupt the certificate during delivery
b) The web protection profile's signatures, because a signature match returns a TLS handshake error to the client
c) The certificate FortiWeb presents to clients, whether it has expired, is the wrong certificate for the hostname, or is missing an intermediate in its chain so clients cannot validate it
d) The back-end server pool's health checks, whether a member is marked down, is slow to respond, or has failed its last probe, since a member in that state is what produces client certificate warnings
 
10. Before FortiWeb's ML-based API discovery can build a reliable model of an API's normal behavior, a prerequisite must be met. What does the learning phase require?
a) HTTPS to be disabled for the API so that requests can be read during the learning period.
b) Enough representative live traffic observed over a learning period.
c) A complete copy of the application's source code uploaded to FortiWeb for static analysis.
d) The backend API gateway to be replaced by a FortiWeb microservice for the duration of learning.

Solutions:

Question: 01

Answer: a

Question: 02

Answer: b

Question: 03

Answer: d

Question: 04

Answer: a

Question: 05

Answer: c

Question: 06

Answer: d

Question: 07

Answer: a

Question: 08

Answer: b

Question: 09

Answer: c

Question: 10

Answer: b

Note: If you find any error in these Fortinet NSE 5 - FortiWeb 8.0 Administrator (FortiWeb Administrator) sample questions, you can update us by write an email on feedback@nwexam.com.

Rating: 4.8 / 5 (111 votes)