Fortinet NSE5_FWB_AD-8.0 問題練習

Question No : 1
Which two checks best confirm that server pool health monitoring is working as intended? (Choose two.)

• A.A failed backend is marked down and FortiWeb stops selecting it for forwarding
• B.Health check results are available for policies/pools that reference the configured check
• C.The GUI admin password changes after each health-check interval
• D.FortiWeb automatically rewrites the backend application code to fix errors

答えを確認する

正解:

Question No : 2
During rollout of bot mitigation, which two metrics are most helpful to validate effectiveness without harming users? (Choose two.)

• A.Reduction in automated-request volume on targeted URLs (for example, login/search)
• B.Increase in repeated challenges reported by legitimate users
• C.HA heartbeat packet loss rate
• D.Rate of bot-related blocks/challenges correlated to suspicious clients

答えを確認する

正解:

Question No : 3
Your team wants to improve visibility into security events while reducing manual effort.
Which two configurations best support that goal? (Choose two.)

• A.Enable logging (attack/traffic/event) to support investigation and reporting
• B.Disable logging to reduce storage usage
• C.Use FortiAI to speed analysis of suspicious log entries
• D.Disable DoS protections to reduce alert volume

答えを確認する

正解:

Question No : 4
In HA deployments, why can heartbeat configuration and stability be important under high load?

• A.Heartbeat is used only for GUI theme synchronization
• B.Heartbeat load automatically disables WAF protections
• C.Heartbeat packets replace backend health checks entirely
• D.Busy appliances may require more time to establish/maintain heartbeat through network devices

答えを確認する

正解:

Question No : 5
A vulnerability scan repeatedly fails to authenticate to the application.
What is the most likely fix?

• A.Disable TLS on the target application
• B.Configure valid credentials/session handling for the scan profile or target requirements
• C.Increase HA election priority
• D.Remove all server pool members except one

答えを確認する

正解:

Question No : 6
Which two log types commonly feed FortiWeb reports and investigation workflows? (Choose two.)

• A.Attack logs
• B.Traffic logs
• C.BIOS logs
• D.GPU driver logs

答えを確認する

正解:

Question No : 7
Which two practices help ensure vulnerability scanning supports compliance objectives without disrupting operations? (Choose two.)

• A.Define scan scope carefully (targets/paths) to avoid unintended systems
• B.Run the scan at maximum aggressiveness during peak business hours
• C.Schedule scans during low-traffic windows
• D.Disable logging to reduce disk usage

答えを確認する

正解:

Question No : 8
In an Active-Passive HA pair, what triggers the passive unit to take over traffic?

• A.The passive unit receives more HTTP requests than the active unit
• B.The passive unit detects a new FortiGuard signature update
• C.The heartbeat indicates the active unit is down or unavailable
• D.The administrator imports a new certificate on the passive unit

答えを確認する

正解:

Question No : 9
Which FortiWeb deployment choice generally provides the broadest feature support across operation modes?

• A.Reverse Proxy mode
• B.Transparent Inspection (TI) mode
• C.True Transparent Proxy (TTP) mode
• D.Offline scanning mode only

答えを確認する

正解:

Question No : 10
Which two statements align with FortiWeb’s schema/ML-based API protection concept? (Choose two.)

• A.It combines API discovery and API protection as core functions
• B.It models API behavior using attributes such as method and endpoint/URL patterns
• C.It requires replacing the backend application with a Fortinet microservice
• D.It works only if HTTPS is disabled end-to-end

答えを確認する

正解:

Question No : 11
When FortiWeb is deployed in Reverse Proxy mode, what role does it play in the traffic path?

• A.It passively receives mirrored traffic and cannot block requests
• B.It proxies client connections and inspects HTTP/HTTPS before sending to backend servers
• C.It only scans application source code repositories for vulnerabilities
• D.It functions only as a DNS server for the protected domains

答えを確認する

正解:

Question No : 12
Which two actions are most appropriate when rolling out DoS protection to a production application? (Choose two.)

• A.Establish baselines and tune thresholds based on normal traffic
• B.Apply the strictest global thresholds immediately across all URLs
• C.Disable client tracking features to prevent state collection
• D.Monitor request-rate anomalies and validate enforcement behavior in logs

答えを確認する

正解:

Question No : 13
In FortiWeb’s ML-based API protection, which endpoint attributes are typically analyzed to model API behavior?

• A.VLAN IDs of backend servers only
• B.CPU temperature and fan speed of the FortiWeb appliance
• C.DNSSEC signatures for the protected domain
• D.Method and URL/endpoint patterns from API traffic

答えを確認する

正解:

Question No : 14
What does FortiWeb enforce regarding server policy application per connection?

• A.Only one server policy is applied to each connection
• B.Multiple server policies are applied in parallel to the same connection
• C.Server policies apply only after the TCP session closes
• D.Server policies apply only to FTP traffic, not HTTP/HTTPS

答えを確認する

正解:

Question No : 15
Which two statements align with FortiWeb’s application delivery feature coverage in training documentation? (Choose two.)

• A.Application delivery is only for offline vulnerability scanning
• B.Application delivery topics can include URL rewriting and single sign-on
• C.Application delivery is limited only to HA and clustering
• D.Application delivery topics can include caching and acceleration

答えを確認する

正解: