View Full Fortinet NSE5_FWB_AD-8.0 Exam Dumps and Practice Test Dumps

 

Question 281. An administrator wants FortiWeb to identify API endpoints by observing application traffic before creating specific API protection rules. Which FortiWeb capability should be used?

1. API discovery
2. Static routing
3. Certificate management
4. Server health checking

Correct Answer: 1. API discovery

Explanation :-

API discovery allows FortiWeb to identify API endpoints and gain visibility into APIs being used by protected applications. This information can help administrators understand the application’s exposed API surface before applying more specific API security controls. API discovery is particularly useful in environments where APIs may not be completely documented or where application changes introduce new endpoints. Static routing determines how packets are forwarded and does not identify API resources. Certificate management handles TLS certificates and keys, while server health checking determines whether backend servers are available. API discovery therefore provides the visibility needed to understand the API attack surface before implementing appropriate protection policies.

Question 282. A web application uses several backend servers, but users must remain connected to the same backend server during their sessions. Which FortiWeb feature should the administrator configure?

1. IP reputation
2. Session persistence
3. Web vulnerability scanning
4. URL rewriting

Correct Answer: 2. Session persistence

Explanation :-

Session persistence maintains affinity between a client and a particular backend server during an application session. This is useful when an application stores session information locally on the backend server rather than in a shared session store. Without persistence, load balancing could send successive requests from the same user to different servers, potentially causing session failures or unexpected application behavior. IP reputation evaluates the trustworthiness of source addresses, vulnerability scanning assesses application weaknesses, and URL rewriting modifies URL information. Session persistence therefore addresses the specific requirement of maintaining client-to-server affinity while still allowing FortiWeb to distribute traffic among backend servers.

Question 283. Which FortiWeb capability can help protect a web application from excessive requests intended to exhaust application resources?

1. Rate limiting
2. Certificate enrollment
3. DNS forwarding
4. URL rewriting

Correct Answer: 1. Rate limiting

Explanation :-

Rate limiting controls the volume of requests permitted from a defined client or traffic category during a specified period. It can help protect application resources from excessive request rates and is particularly useful as part of a broader denial-of-service protection strategy. By enforcing a threshold, FortiWeb can reduce the impact of clients generating unusually high request volumes without necessarily requiring permanent blocking. Certificate enrollment manages certificates, DNS forwarding handles name resolution, and URL rewriting changes URL structures. Rate limiting is therefore the control most directly associated with restricting excessive application-layer request rates and helping maintain service availability during traffic-abuse scenarios.

Question 284. An administrator needs to modify an incoming request URL before FortiWeb forwards it to a backend server. Which feature should be configured?

1. URL rewriting
2. Bot mitigation
3. IP reputation
4. Web caching

Correct Answer: 1. URL rewriting

Explanation :-

URL rewriting allows FortiWeb to modify URL information according to configured rules before traffic is forwarded or returned to clients. This can be useful when public URLs need to map to different internal application paths, when legacy URL structures must be supported, or when an application requires controlled URL transformation. Bot mitigation focuses on identifying and controlling automated clients, IP reputation evaluates source-address reputation, and web caching stores eligible content to improve delivery performance. None of these functions is primarily intended to change the URL itself. URL rewriting therefore directly satisfies a requirement to transform an incoming request URL before it reaches the backend application.

Question 285. A company wants FortiWeb to identify attacks against application parameters by validating whether submitted values conform to expected data types and formats. Which security approach is most appropriate?

1. Data validation
2. DNS caching
3. Session persistence
4. Static route filtering

Correct Answer: 1. Data validation

Explanation :-

Data validation allows FortiWeb to enforce expectations about application input, such as acceptable formats, lengths, types, or values. Validating application parameters can reduce the risk of malicious or malformed input reaching backend applications. This is especially useful when applications accept structured parameters that should conform to known requirements. DNS caching improves name-resolution performance, session persistence maintains backend affinity, and static route filtering controls network forwarding. Data validation provides an application-layer security control that checks whether user-supplied input conforms to defined expectations. Properly configured validation can therefore complement WAF signatures and other security mechanisms to reduce application input abuse.

Question 286. Which FortiWeb feature is designed to identify automated clients that may be performing credential stuffing or other abusive activities?

1. Bot mitigation
2. SSL certificate management
3. Web caching
4. DNS forwarding

Correct Answer: 1. Bot mitigation

Explanation :-

Bot mitigation is designed to detect and control automated clients interacting with protected web applications. Credential-stuffing attacks often involve automated systems submitting large numbers of username and password combinations, making behavioral detection and automation controls important defenses. FortiWeb can use bot-related detection mechanisms to distinguish suspicious automated activity from legitimate users. SSL certificate management handles cryptographic certificates, web caching improves content delivery, and DNS forwarding handles name resolution. Bot mitigation therefore directly addresses the requirement to identify and control automated clients that may be abusing authentication endpoints or other application resources.

Question 287. An administrator wants FortiWeb to terminate a client’s TLS session so that encrypted HTTP traffic can be inspected by the WAF. Which capability enables this inspection?

1. SSL/TLS inspection
2. DNS forwarding
3. Static content caching
4. Session persistence

Correct Answer: 1. SSL/TLS inspection

Explanation :-

SSL/TLS inspection allows FortiWeb to terminate or otherwise process encrypted application traffic so that the underlying HTTP requests can be inspected by security controls. Without appropriate TLS handling, encrypted application content would not be available in clear form for normal WAF inspection. FortiWeb can use certificates and TLS configuration to establish the appropriate security architecture for protected HTTPS applications. DNS forwarding handles name resolution, static caching improves content delivery, and session persistence maintains backend affinity. SSL/TLS inspection is therefore essential when the objective is to inspect encrypted web requests for attacks, policy violations, or other application-layer security conditions.

Question 288. Which FortiWeb feature can help an administrator verify whether a protected backend web server is responding correctly before sending production traffic to it?

1. Server health check
2. WAF signature
3. API schema
4. Cookie security rule

Correct Answer: 1. Server health check

Explanation :-

Server health checks allow FortiWeb to monitor backend real servers and determine whether they are available and responding according to configured criteria. Depending on the health-check configuration, FortiWeb can send specific requests and evaluate the response to determine whether the server should remain eligible for traffic. This helps prevent requests from being forwarded to failed or unhealthy application instances. WAF signatures detect application attacks, API schemas define expected API structures, and cookie security rules protect session-related information. Server health checking therefore provides the operational mechanism required to verify backend availability before and during application traffic forwarding.

Question 289. A security administrator wants to use FortiWeb logs to determine which WAF rule blocked a legitimate request. Which information is most relevant when reviewing the event?

1. The triggered security rule and action
2. The physical serial-console cable type
3. The administrator’s desktop wallpaper
4. The browser’s bookmark list

Correct Answer: 1. The triggered security rule and action

Explanation :-

When troubleshooting a potentially false-positive WAF event, the triggered security rule and the action taken are among the most important pieces of information in the event log. They help the administrator determine which protection mechanism caused the request to be blocked and provide a basis for deciding whether the policy requires adjustment. Additional event details such as the source address, URL, request characteristics, and timestamp can provide useful context. The physical serial-console cable, desktop wallpaper, and browser bookmarks have no relationship to the WAF enforcement decision. Log analysis should therefore focus on the security detection and policy action responsible for the event.

Question 290. Which FortiWeb function is associated with enforcing protection against application-layer denial-of-service attacks?

1. DoS prevention
2. DNS caching
3. Certificate import
4. URL rewriting

Correct Answer: 1. DoS prevention

Explanation :-

DoS prevention provides controls intended to protect web applications from excessive or abusive traffic that can degrade application availability. Application-layer denial-of-service attacks may use legitimate-looking HTTP requests at an excessive rate or exploit expensive application functions to consume server resources. FortiWeb can apply thresholds and behavioral controls to identify and limit such traffic. DNS caching improves name-resolution performance, certificate import manages TLS credentials, and URL rewriting modifies URL structures. These functions do not directly provide application-layer DoS protection. DoS prevention is therefore the FortiWeb capability specifically associated with reducing the impact of application-layer resource-exhaustion attacks.

Question 291. An organization wants to enforce a maximum request size for a particular application parameter to reduce exposure to oversized input attacks. Which FortiWeb capability is most relevant?

1. Input validation and size constraints
2. DNS forwarding
3. HA heartbeat
4. Session persistence

Correct Answer: 1. Input validation and size constraints

Explanation :-

Input validation and size constraints can restrict application parameters to expected lengths and formats. Limiting the size of parameters helps prevent oversized or malformed input from reaching backend applications and can reduce certain attack and resource-exhaustion risks. These controls are particularly useful when the application has clearly defined requirements for fields such as usernames, identifiers, search terms, or other request parameters. DNS forwarding is unrelated to application input, HA heartbeat supports high-availability communication, and session persistence maintains backend affinity. Input validation and size constraints therefore provide the application-layer control needed when the security requirement focuses on limiting the size and structure of user-supplied parameters.

Question 292. Which FortiWeb feature allows an administrator to apply different security behavior based on the content or characteristics of an HTTP request?

1. HTTP content-based routing
2. System backup
3. Interface aliasing
4. Certificate expiration monitoring

Correct Answer: 1. HTTP content-based routing

Explanation :-

HTTP content-based routing allows FortiWeb to make routing or forwarding decisions based on characteristics of HTTP traffic. This can allow different URLs, headers, methods, or other application-layer information to be directed toward appropriate backend resources according to configured rules. Such routing provides more application-aware control than basic network-layer forwarding. System backup protects configuration data, interface aliasing provides administrative naming, and certificate expiration monitoring concerns certificate lifecycle management. When the requirement is to make traffic-handling decisions based on HTTP request content or characteristics, HTTP content-based routing is the relevant FortiWeb capability.

Question 293. An administrator is deploying FortiWeb in front of multiple backend application servers and wants FortiWeb to distribute traffic among them. Which object should contain the collection of backend servers?

1. Server pool
2. WAF signature group
3. Authentication policy
4. Certificate group

Correct Answer: 1. Server pool

Explanation :-

A server pool contains the backend real servers that FortiWeb can use when forwarding requests for a protected application. The pool can include multiple servers and work with load-balancing and health-check mechanisms to distribute traffic while avoiding unavailable members. WAF signature groups contain security detection rules, authentication policies control user access, and certificate groups are associated with TLS configuration rather than backend server selection. A properly configured server pool is therefore a fundamental part of deploying FortiWeb as a reverse proxy for applications that have multiple backend servers.

Question 294. Which capability allows FortiWeb to authenticate users through a centralized single sign-on mechanism using an external identity provider?

1. Single sign-on
2. Static routing
3. Web caching
4. IP reputation

Correct Answer: 1. Single sign-on

Explanation :-

Single sign-on allows users to authenticate through a centralized identity mechanism instead of maintaining separate credentials for every protected application. FortiWeb can integrate supported authentication technologies and external identity providers to provide controlled access to web applications. This can improve centralized identity management and provide a consistent authentication experience across applications. Static routing handles packet forwarding, web caching improves delivery performance, and IP reputation evaluates source-address reputation. Single sign-on is therefore the appropriate capability when the requirement is to authenticate users through a centralized identity service and provide authenticated access to protected web resources.

Question 295. A security team wants to assess a web application’s security posture against known vulnerabilities without waiting for an attack to occur. Which FortiWeb function is appropriate?

1. Web vulnerability scanning
2. Session persistence
3. DNS forwarding
4. HTTP compression

Correct Answer: 1. Web vulnerability scanning

Explanation :-

Web vulnerability scanning provides a proactive method for identifying weaknesses in a web application. Rather than waiting for malicious traffic to expose a vulnerability, administrators can use scanning capabilities to assess application behavior and identify potential security issues that require remediation. Session persistence maintains client affinity to backend servers, DNS forwarding handles name resolution, and HTTP compression optimizes content transfer. Vulnerability scanning is therefore appropriate when an organization wants to evaluate its application’s security posture proactively. It complements runtime WAF protection because discovering and fixing application weaknesses can reduce the number of vulnerabilities that must be mitigated solely through traffic inspection.

Question 296. Which FortiWeb capability can use machine-learning techniques to identify abnormal application traffic that may not match predefined attack signatures?

1. Machine learning
2. Static DNS configuration
3. Network interface bonding
4. Certificate enrollment

Correct Answer: 1. Machine learning

Explanation :-

Machine-learning capabilities can identify abnormal application behavior by analyzing patterns in traffic and comparing observed activity with learned expectations. This can help FortiWeb detect unusual requests that may not match conventional predefined signatures. Machine learning is particularly useful as a complementary detection mechanism because attackers can sometimes modify their traffic to evade static patterns. Static DNS configuration manages name resolution, interface bonding provides network redundancy or capacity, and certificate enrollment obtains or manages certificates. Machine learning therefore directly addresses the requirement to identify anomalous application traffic using behavioral analysis rather than relying exclusively on predefined attack signatures.

Question 297. An administrator needs to ensure that a certificate presented by a backend HTTPS server is trusted before FortiWeb establishes the server-side TLS connection. Which configuration area is relevant?

1. Certificate validation and trust configuration
2. URL rewriting
3. Bot mitigation
4. Web caching

Correct Answer: 1. Certificate validation and trust configuration

Explanation :-

When FortiWeb establishes a TLS connection to an HTTPS backend, certificate validation and trust configuration determine whether the presented server certificate can be trusted according to the configured certificate authority and validation requirements. Proper validation helps protect against connecting to an unintended or untrusted backend endpoint. URL rewriting modifies URL information, bot mitigation controls automated clients, and web caching stores eligible content for performance. These features do not establish certificate trust. Therefore, when FortiWeb must verify a backend HTTPS server’s certificate before completing the server-side TLS connection, certificate validation and the appropriate trust configuration are required.

Question 298. Which FortiWeb configuration is most directly associated with controlling which administrators can access specific management functions?

1. Administrator profiles
2. Server pools
3. API schemas
4. URL rewrite rules

Correct Answer: 1. Administrator profiles

Explanation :-

Administrator profiles define the permissions available to FortiWeb administrators. By assigning appropriate profiles, organizations can implement role-based administrative access and limit users to the functions required for their responsibilities. This supports the principle of least privilege and helps reduce the risk of unauthorized configuration changes. Server pools define backend application resources, API schemas describe expected API structures, and URL rewrite rules modify application URLs. None of these controls administrative privileges. Administrator profiles are therefore the relevant configuration object when the requirement is to control which management functions an administrator can view or modify.

Question 299. An organization needs to maintain application availability when a FortiWeb appliance becomes unavailable. Which deployment capability should be implemented?

1. High availability
2. URL rewriting
3. API discovery
4. Web caching

Correct Answer: 1. High availability

Explanation :-

High availability allows multiple FortiWeb appliances to operate together to provide redundancy. If one appliance becomes unavailable, the HA configuration can allow another member to continue providing protection and application-delivery services, depending on the deployment design and failure condition. URL rewriting changes application URLs, API discovery identifies application interfaces, and web caching improves content-delivery efficiency. None of these provides appliance-level redundancy. Implementing HA is therefore the appropriate approach when application availability must be maintained despite the failure of an individual FortiWeb appliance. Administrators should also verify synchronization, network connectivity, failover behavior, and state requirements when designing the HA deployment.

Question 300. Which combination best represents major areas covered by the FortiWeb 8.0 Administrator exam?

1. Deployment and configuration, web/API security, application delivery, DoS and logging, troubleshooting, and vulnerability scanning
2. Wireless controller deployment, endpoint antivirus, and switch stacking only
3. Database administration, operating-system kernel development, and virtualization only
4. Email mailbox administration, desktop imaging, and printer management only

Correct Answer: 1. Deployment and configuration, web/API security, application delivery, DoS and logging, troubleshooting, and vulnerability scanning

Explanation :-

The FortiWeb 8.0 Administrator exam covers deployment and configuration, web application and API security, bot mitigation, application delivery, additional security capabilities such as DoS prevention and logging, troubleshooting, and web vulnerability scanning. Fortinet’s official exam description identifies these areas as the principal knowledge domains for the exam. The other choices describe technologies that are outside the core FortiWeb Administrator exam scope. The official Fortinet Training Institute also lists FortiWeb deployment, server objects and policies, SSL/TLS, API protection, bot mitigation, application delivery, DoS prevention, logging, FortiAI, compliance, and troubleshooting among the relevant course and exam preparation topics.