Fortinet NSE5_FWB_AD-8.0 Prüfungsthemen:
| Abschnitt | Ziele |
|---|---|
| Anwendungsbereitstellung und Zusätzliche Konfiguration | - FortiAI-Integration - Protokollierungs- und Berichtskonfiguration - Anwendungsbereitstellungsoptimierung - Denial of Service (DoS)-Minderung |
| Webanwendungs- und API-Sicherheit | - Webanwendungs-Sicherheitskonfiguration - API-Entdeckung und -Schutz - Botnetz-Minderung und Schutzfeatures |
| Compliance und Fehlerbehebung | - System- und Konfigurationsfehlerbehebung - Einsetzungsprobleme beheben - Implementierung der Web-Schwachstellenanalyse |
| Einsetzung und Konfiguration | - FortiWeb-Einsetzung und grundlegende Verwaltung - SSL-Inspektion, -Entlastung und hohe Verfügbarkeit (HA) - Serverobjekte und Richtlinienkonfiguration |
Fortinet NSE 5 - FortiWeb 8.0 Administrator NSE5_FWB_AD-8.0 Prüfungsfragen mit Lösungen
Which two actions can FortiWeb take when an attack signature is matched, depending on the configured action? (Choose two.)
- A. Deny (block) the request
- B. Alert only
- C. Modify DNS records
- D. Automatically patch the back-end server code
Antwort: A,B 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
Which log type would an administrator review first to investigate a specific blocked SQL injection attempt, including the matched signature and payload details?
- A. Attack log
- B. System log
- C. Traffic log
- D. Event log
Antwort: A 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
Which situation best explains when a FortiWeb administrator should enable automatic HTTP-to- HTTPS redirection?
- A. The back-end server uses only HTTP and cannot support encryption.
- B. Users are accessing a static website that does not handle sensitive data.
- C. The web application handles logins or personal data and must ensure encrypted communication.
- D. The organization prefers to keep both HTTP and HTTPS available for flexibility.
Antwort: C 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
Drag and Drop Question
Refer to the exhibit.
You are a FortiWeb administrator reviewing how FortiAI protects sensitive data when interacting with a large language model (LLM).
Drag each label to the corresponding step in the FortiAI data privacy workflow.
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the six correct steps in order, placing the first step in the position which is labeled as step 1.
Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop six steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.
Antwort:
Explanation:
1 → The administrator submits a natural-language query.
2 → FortiWeb masks sensitive data.
3 → FortiAI Proxy sends a masked query to the LLM.
4 → The LLM returns a function response.
5 → FortiWeb unmasks and runs the query locally.
6 → The result is shown to the administrator with original values.
FortiAI protects sensitive data by masking values before anything is sent to the LLM. The LLM works only with the masked prompt and returns a function-style response. FortiWeb then restores the original values locally, runs the query, and displays the final result to the administrator without exposing real sensitive data externally.
An administrator is troubleshooting why FortiWeb is not decrypting HTTPS traffic for inspection in reverse proxy mode. What is the most likely missing configuration?
- A. A local certificate and private key bound to the virtual server for SSL offloading
- B. An HA heartbeat interface
- C. A static route to the internet
- D. A DNS resolver setting
Antwort: A 🗳️
Erklärung: (Nur für DeutschPrüfung-Mitglieder sichtbar)
Seite 1 von 13 wird angezeigt.
Fragen 1-5 von 63 werden angezeigt.
1326 Kundenbewertungen
