NSE5_FWB_AD-8.0無料問題集「Fortinet NSE 5 - FortiWeb 8.0 Administrator」

質問 1

An administrator notices that legitimate search engine crawlers are being blocked by FortiWeb's bot mitigation feature. What is the recommended way to allow known, verified crawlers while still blocking malicious bots?

（A）Switch to offline protection mode.

（B）Disable bot mitigation entirely.

（C）Increase the HTTP protocol constraint header size limit.

（D）Configure a known bots list/allow list that verifies crawler identity, such as through reverse DNS lookup.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which statement about FortiWeb's "Auto Learning" (or "Auto-learn") profile is correct?

（A）It passively monitors and profiles traffic to build a baseline that administrators can later use to fine-tune protection rules.

（B）It permanently blocks all traffic during the learning period.

（C）It requires a separate hardware appliance.

（D）It disables all other security profiles while active.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A web application requires that FortiWeb detect and block credential stuffing attempts where a botnet cycles through many username/password combinations. Which FortiWeb feature is best suited for this?

（A）HTTP protocol constraints

（B）URL rewriting

（C）Web cache

（D）Brute force login protection combined with bot mitigation

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit.

You have deployed FortiWeb behind a FortiGate that is configured as a reverse proxy and inserts the X-Forwarded-For HTTP header when forwarding HTTP and HTTPS traffic.
FortiWeb is using a custom inline protection profile, and logging is enabled, as shown in the exhibit.
You notice that FortiWeb is blocking legitimate users, and all requests in the attack logs appear to come from the FortiGate IP address, not the original client IP addresses.
Which action should you take to fix this issue?

（A）Recreate the server policy using the predefined profile instead of a custom one.

（B）Replace the current deployment mode with a one-arm proxy to expose source IP addresses.

（C）Disable IP-based detection features on FortiWeb to avoid IP-related blocking.

（D）Modify the protection profile to use the X-Forwarded-For header for client IP address detection.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A FortiWeb administrator needs to allow a known web indexer to scan the website for search engine visibility. What is the easiest way to allow this on FortiWeb?

（A）Add the web indexer IP address to the trusted IP address list.

（B）Add the web indexer user-agent string to a custom signature exemption rule.

（C）Add the web indexer IP address to the FortiGuard Known Search Engines category.

（D）Add the web indexer IP address to an IP exception list inside the inline protection profile.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

You are reviewing SSL-related issues on FortiWeb. An administrator reports that they receive a certificate warning when they access the FortiWeb GUI over HTTPS. Separately, your FortiWeb device also makes outbound HTTPS requests to a back-end API server. In which two situations would FortiWeb use its own certificates to establish or secure the connection? (Choose two.)

（A）When an administrator connects to the FortiWeb GUI using HTTPS in a browser.

（B）When FortiWeb is routing an HTTPS connection to a FortiGate without decrypting it.

（C）When FortiWeb connects to a back-end server over HTTPS as a client.

（D）When a client browser initiates an SSL session and FortiWeb is in transparent inspection mode.

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which statement correctly differentiates FortiWeb's "signature-based detection" from "machine learning-based detection"?

（A）Machine learning only works in offline protection mode, while signatures only work in reverse proxy mode.

（B）Signature-based detection requires no updates, while machine learning must be updated daily via FortiGuard.

（C）Signature-based detection matches traffic against known attack patterns, while machine learning detects anomalies by comparing traffic to a learned baseline of normal behavior.

（D）Signature-based detection is exclusively used for SSL, while machine learning is exclusively used for HTTP.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE5_FWB_AD-8.0 無料問題集「Fortinet NSE 5 - FortiWeb 8.0 Administrator」

弊社を連絡する

関連リンク

トップ試験