NSE5_FWB_AD-8.0問題集、Fortinet実際の試験問題

質問 1

You have configured parameter validation, file security, and machine learning (ML) anomaly detection for a web form, but some server-side request forgery tests are still succeeding. You need to advise the team on what to prioritize next to improve SSRF protection without compromising other parts of the application. Which recommendation would best strengthen FortiWeb's ability to block remaining SSRF attempts?

A. Apply HTTPS inspection at the transport layer, which FortiWeb does not use to block SSRF.

B. Disable ML anomaly detection and rely solely on parameter inspection.

C. Review and refine input validation logic, as SSRF may be exploiting backend behavior or bypassing weak filters.

D. Offload all server-side request forgery (SSRF) protection to FortiGate and remove FortiWeb from the API flow.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Your security team is reviewing tools for artificial intelligence (AI) integration and wants to ensure no real user or IP data is exposed to third-party services. How does FortiAI meet this requirement better than traditional external AI tools?

A. FortiAI blocks all network access during queries.

B. Only masked prompts go to the LLM; unmasking happens locally.

C. It encrypts data using a cloud-based key.

D. The large language model (LLM) receives IP addresses from only the internal DNS.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 3

An administrator sees repeated requests probing for common vulnerable file paths such as "/wp- admin/" and "/.env" against a server that does not run WordPress or expose environment files.
Which FortiWeb feature is designed to detect this behavior pattern?

A. GSLB routing rule

B. Known attack/vulnerability scanning detection

C. Server pool health check

D. TLS renegotiation limit

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit.

What is does the exhibit show?

A. The FortiGate UI interface in HTML.

B. The result of a show ui details command on a FortiWeb server.

C. A sample response returned by the FortiGate API at https://fortigate.com/ui.

D. An API schema file.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Your company hosts two different web applications: a shopping site and a blog. You want FortiWeb to apply different protection profiles and forwarding rules to each application. How should you configure FortiWeb to support this?

A. Configure one server pool but assign different firewall policies.

B. Create a separate server policy for each application.

C. Use one server policy with different virtual IP addresses.

D. Use source network address translation (SNAT) with web caching to split the requests.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

An administrator is troubleshooting why FortiWeb is not decrypting HTTPS traffic for inspection in reverse proxy mode. What is the most likely missing configuration?

A. A DNS resolver setting

B. A static route to the internet

C. A local certificate and private key bound to the virtual server for SSL offloading

D. An HA heartbeat interface

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which two actions can FortiWeb take when an attack signature is matched, depending on the configured action? (Choose two.)

A. Alert only

B. Modify DNS records

C. Automatically patch the back-end server code

D. Deny (block) the request

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 5 - FortiWeb 8.0 Administrator - NSE5_FWB_AD-8.0 模擬練習