Online Access Free NSE5_FWB_AD-8.0 Practice Test

A FortiWeb administrator needs to distribute traffic geographically across data centers in different regions for disaster recovery and performance. Which feature accomplishes this?

• A.HTTP content routing
• B.Local server pool
• C.Protocol constraint profile
• D.Global server load balancing (GSLB)

While reviewing FortiWeb logs, you notice a suspicious login request that failed authentication.
You suspect it may be part of an injection attack targeting the login form. Which input pattern is an example of a typical SQL injection attempt that could bypass authentication checks?

• A.<sql>select(ALL USERS);</sql>
• B.'||(SELECT password FROM users WHERE role='admin')||'
• C.<script>document.location='/steal?cookie='+document.cookie</script>
• D.SELECT username FROM accounts WHERE username='admin';-- ' AND password='password';

Which statement about FortiWeb's "Auto Learning" (or "Auto-learn") profile is correct?

• A.It permanently blocks all traffic during the learning period.
• B.It passively monitors and profiles traffic to build a baseline that administrators can later use to fine-tune protection rules.
• C.It requires a separate hardware appliance.
• D.It disables all other security profiles while active.

Refer to the exhibit.

You have deployed FortiWeb behind a FortiGate that is configured as a reverse proxy and inserts the X-Forwarded-For HTTP header when forwarding HTTP and HTTPS traffic.
FortiWeb is using a custom inline protection profile, and logging is enabled, as shown in the exhibit.
You notice that FortiWeb is blocking legitimate users, and all requests in the attack logs appear to come from the FortiGate IP address, not the original client IP addresses.
Which action should you take to fix this issue?

• A.Disable IP-based detection features on FortiWeb to avoid IP-related blocking.
• B.Modify the protection profile to use the X-Forwarded-For header for client IP address detection.
• C.Replace the current deployment mode with a one-arm proxy to expose source IP addresses.
• D.Recreate the server policy using the predefined profile instead of a custom one.

Drag and Drop Question
Refer to the exhibit.

You are a FortiWeb administrator reviewing how FortiAI protects sensitive data when interacting with a large language model (LLM).
Drag each label to the corresponding step in the FortiAI data privacy workflow.
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the six correct steps in order, placing the first step in the position which is labeled as step 1.
Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop six steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.

Correct Answer:

Explanation:
1 → The administrator submits a natural-language query.
2 → FortiWeb masks sensitive data.
3 → FortiAI Proxy sends a masked query to the LLM.
4 → The LLM returns a function response.
5 → FortiWeb unmasks and runs the query locally.
6 → The result is shown to the administrator with original values.
FortiAI protects sensitive data by masking values before anything is sent to the LLM. The LLM works only with the masked prompt and returns a function-style response. FortiWeb then restores the original values locally, runs the query, and displays the final result to the administrator without exposing real sensitive data externally.