Fortinet NSE 5 - FortiWeb 8.0 Administrator Sample Questions:
1. You are a FortiWeb administrator investigating an SQL injection attack on your company's customer portal.
The network firewall and intrusion prevention system (IPS) did not stop the attack.
You decide to deploy a web application firewall (WAF) to help prevent this type of attack.
Which two actions can you take to block application-layer threats? (Choose two.)
A) Detect and block threats like SQL injection, cross-site scripting (XSS), and other Layer 7 attacks.
B) Focus on client-side risks, such as protecting user browsers.
C) Filter and analyze HTTP/S requests to block attacks targeting the web server.
D) Inspect general network traffic equally between clients and servers.
2. You recently deployed two FortiWeb devices in an active-active (A-A) high availability (HA) cluster.
During routine maintenance, you want to confirm that the cluster is synchronizing the correct configuration areas and that both FortiWeb devices behave consistently in production.
As the FortiWeb administrator, which two configuration areas should you examine to verify that HA synchronization is functioning correctly? (Choose two.)
A) Check the network configuration on both FortiWeb devices-such as interfaces and static routes-to ensure they are aligned.
B) Review policy configurations, including server policies and protection profiles, to confirm they match across the cluster.
C) Verify whether firmware images and upgrade history are synchronized between the FortiWeb devices.
D) Review inspection and mitigation log files to determine if they are being replicated across both FortiWeb devices.
3. A FortiWeb administrator sees the following request:
GET /api/v1/data HTTP/1.1
Host: example.com
Authorization: ApiKey abc123def456
The API key belongs to a user in group B who is authorized to access only /api/v1/reports.
What should the administrator do to prevent this unauthorized access?
A) Allow all valid API keys to access any API endpoint.
B) Block /api/v1/data for all user groups to avoid policy confusion.
C) Restrict access to /api/v1/data using user group-based access control.
D) Move the user to group A so they can access both endpoints.
4. A large enterprise has an existing web infrastructure with complex routing rules and static IP address assignments. The network administrators cannot modify the current IP address scheme, but they need FortiWeb to inspect and block threats like SQL injection and cross-site scripting (XSS) without changing the client-server communication flow.
In this situation, which FortiWeb operation mode is the most suitable?
A) True transparent proxy mode
B) Decryption mirror mode
C) Web Cache Communication Protocol (WCCP) redirection mode
D) Reverse proxy mode
Solutions:
| Question # 1 Answer: A,C | Question # 2 Answer: A,B | Question # 3 Answer: C | Question # 4 Answer: A |
0 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
