Free Fortinet NSE5_FWB_AD-8.0 Exam Dumps Questions & Answers

An administrator is troubleshooting why FortiWeb is not decrypting HTTPS traffic for inspection in reverse proxy mode. What is the most likely missing configuration?

• A.  A local certificate and private key bound to the virtual server for SSL offloading
• B.  A DNS resolver setting
• C.  A static route to the internet
• D.  An HA heartbeat interface

You are setting up a FortiWeb policy to protect a customer login portal. Users connect to
https://login.training.lab, and you want FortiWeb to forward those requests to a load-balanced pool of back-end servers. Which three components must you configure to complete the server policy?

• A.  DNS resolver, URL rewrite rule, and HTTP health check
• B.  Real server, IPsec tunnel, and static route
• C.  Web application firewall (WAF) profile, DoS policy, and server name indication (SNI)-based certificate
• D.  Virtual server, server pool, and port settings (service)

Refer to the exhibit.

You are a FortiWeb administrator. FortiWeb is deployed between a FortiGate and two back-end web servers, as shown in the diagram. No server policies are currently configured on FortiWeb.
While testing, you notice that a student system in the 100.64.0.0/24 network is still able to access the back-end servers in 10.1.1.0/24, even though FortiWeb is not logging or inspecting the traffic.
Which action should you take to ensure FortiWeb blocks or inspects all traffic before it reaches the back-end servers?

• A.  Add static routes on FortiGate to route traffic back through the FortiWeb internal interface.
• B.  Enable network address translation (NAT) mode on FortiWeb to hide the backend server IP addresses.
• C.  Disable ip-forward to prevent traffic from passing through FortiWeb without a matching server policy.
• D.  Configure FortiWeb in transparent mode to force traffic inspection.

Refer to the exhibit.

What is does the exhibit show?

• A.  An API schema file.
• B.  A sample response returned by the FortiGate API at https://fortigate.com/ui.
• C.  The result of a show ui details command on a FortiWeb server.
• D.  The FortiGate UI interface in HTML.

You have configured parameter validation, file security, and machine learning (ML) anomaly detection for a web form, but some server-side request forgery tests are still succeeding. You need to advise the team on what to prioritize next to improve SSRF protection without compromising other parts of the application. Which recommendation would best strengthen FortiWeb's ability to block remaining SSRF attempts?

• A.  Review and refine input validation logic, as SSRF may be exploiting backend behavior or bypassing weak filters.
• B.  Disable ML anomaly detection and rely solely on parameter inspection.
• C.  Offload all server-side request forgery (SSRF) protection to FortiGate and remove FortiWeb from the API flow.
• D.  Apply HTTPS inspection at the transport layer, which FortiWeb does not use to block SSRF.