NSE5_FWB_AD-8.0 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Which two checks best confirm that server pool health monitoring is working as intended? (Choose two.)

A.A failed backend is marked down and FortiWeb stops selecting it for forwarding
B.Health check results are available for policies/pools that reference the configured check
C.The GUI admin password changes after each health-check interval
D.FortiWeb automatically rewrites the backend application code to fix errors

正解:

Question No : 2
During rollout of bot mitigation, which two metrics are most helpful to validate effectiveness without harming users? (Choose two.)

A.Reduction in automated-request volume on targeted URLs (for example, login/search)
B.Increase in repeated challenges reported by legitimate users
C.HA heartbeat packet loss rate
D.Rate of bot-related blocks/challenges correlated to suspicious clients

正解:

Question No : 3
Your team wants to improve visibility into security events while reducing manual effort.
Which two configurations best support that goal? (Choose two.)

A.Enable logging (attack/traffic/event) to support investigation and reporting
B.Disable logging to reduce storage usage
C.Use FortiAI to speed analysis of suspicious log entries
D.Disable DoS protections to reduce alert volume

正解:

Question No : 4
In HA deployments, why can heartbeat configuration and stability be important under high load?

A.Heartbeat is used only for GUI theme synchronization
B.Heartbeat load automatically disables WAF protections
C.Heartbeat packets replace backend health checks entirely
D.Busy appliances may require more time to establish/maintain heartbeat through network devices

正解:

Question No : 5
A vulnerability scan repeatedly fails to authenticate to the application.
What is the most likely fix?

A.Disable TLS on the target application
B.Configure valid credentials/session handling for the scan profile or target requirements
C.Increase HA election priority
D.Remove all server pool members except one

正解:

Question No : 6
Which two log types commonly feed FortiWeb reports and investigation workflows? (Choose two.)

A.Attack logs
B.Traffic logs
C.BIOS logs
D.GPU driver logs

正解:

Question No : 7
Which two practices help ensure vulnerability scanning supports compliance objectives without disrupting operations? (Choose two.)

A.Define scan scope carefully (targets/paths) to avoid unintended systems
B.Run the scan at maximum aggressiveness during peak business hours
C.Schedule scans during low-traffic windows
D.Disable logging to reduce disk usage

正解:

Question No : 8
In an Active-Passive HA pair, what triggers the passive unit to take over traffic?

A.The passive unit receives more HTTP requests than the active unit
B.The passive unit detects a new FortiGuard signature update
C.The heartbeat indicates the active unit is down or unavailable
D.The administrator imports a new certificate on the passive unit

正解:

Question No : 9
Which FortiWeb deployment choice generally provides the broadest feature support across operation modes?

A.Reverse Proxy mode
B.Transparent Inspection (TI) mode
C.True Transparent Proxy (TTP) mode
D.Offline scanning mode only

正解:

Question No : 10
Which two statements align with FortiWeb’s schema/ML-based API protection concept? (Choose two.)

A.It combines API discovery and API protection as core functions
B.It models API behavior using attributes such as method and endpoint/URL patterns
C.It requires replacing the backend application with a Fortinet microservice
D.It works only if HTTPS is disabled end-to-end

正解:

Question No : 11
When FortiWeb is deployed in Reverse Proxy mode, what role does it play in the traffic path?

A.It passively receives mirrored traffic and cannot block requests
B.It proxies client connections and inspects HTTP/HTTPS before sending to backend servers
C.It only scans application source code repositories for vulnerabilities
D.It functions only as a DNS server for the protected domains

正解:

Question No : 12
Which two actions are most appropriate when rolling out DoS protection to a production application? (Choose two.)

A.Establish baselines and tune thresholds based on normal traffic
B.Apply the strictest global thresholds immediately across all URLs
C.Disable client tracking features to prevent state collection
D.Monitor request-rate anomalies and validate enforcement behavior in logs

正解:

Question No : 13
In FortiWeb’s ML-based API protection, which endpoint attributes are typically analyzed to model API behavior?

A.VLAN IDs of backend servers only
B.CPU temperature and fan speed of the FortiWeb appliance
C.DNSSEC signatures for the protected domain
D.Method and URL/endpoint patterns from API traffic

正解:

Question No : 14
What does FortiWeb enforce regarding server policy application per connection?

A.Only one server policy is applied to each connection
B.Multiple server policies are applied in parallel to the same connection
C.Server policies apply only after the TCP session closes
D.Server policies apply only to FTP traffic, not HTTP/HTTPS

正解:

Question No : 15
Which two statements align with FortiWeb’s application delivery feature coverage in training documentation? (Choose two.)

A.Application delivery is only for offline vulnerability scanning
B.Application delivery topics can include URL rewriting and single sign-on
C.Application delivery is limited only to HA and clustering
D.Application delivery topics can include caching and acceleration

正解:

Fortinet NSE5_FWB_AD-8.0 問題練習