Fortinet NSE 5 - FortiWeb 8.0 Administrator - NSE5_FWB_AD-8.0 Exam Practice Test
Question 1
Drag and Drop Question
Refer to the exhibit.
You are a FortiWeb administrator reviewing how FortiAI protects sensitive data when interacting with a large language model (LLM).
Drag each label to the corresponding step in the FortiAI data privacy workflow.
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the six correct steps in order, placing the first step in the position which is labeled as step 1.
Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop six steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.
Refer to the exhibit.
You are a FortiWeb administrator reviewing how FortiAI protects sensitive data when interacting with a large language model (LLM).
Drag each label to the corresponding step in the FortiAI data privacy workflow.
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the six correct steps in order, placing the first step in the position which is labeled as step 1.
Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop six steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.
Correct Answer:
Explanation:
1 → The administrator submits a natural-language query.
2 → FortiWeb masks sensitive data.
3 → FortiAI Proxy sends a masked query to the LLM.
4 → The LLM returns a function response.
5 → FortiWeb unmasks and runs the query locally.
6 → The result is shown to the administrator with original values.
FortiAI protects sensitive data by masking values before anything is sent to the LLM. The LLM works only with the masked prompt and returns a function-style response. FortiWeb then restores the original values locally, runs the query, and displays the final result to the administrator without exposing real sensitive data externally.
Question 2
A FortiWeb administrator wants to stop coordinated scraping traffic coming from several IP addresses, each making only a few requests so thresholds never trigger. Which tactic should the administrator deploy to identify botnets using shared behavioral signals instead of volume?
Correct Answer: B
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 3
You are reviewing a report from your FortiWeb logs and notice a JavaScript payload like
<script>document.cookie</script> submitted through a product review form. The page doesn't filter the script, and users who view the review have their session cookies exposed. Which type of attack does this scenario represent?
<script>document.cookie</script> submitted through a product review form. The page doesn't filter the script, and users who view the review have their session cookies exposed. Which type of attack does this scenario represent?
Correct Answer: C
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 4
Which FortiWeb component is responsible for distributing incoming client requests across multiple back-end real servers based on a configured load balancing algorithm?
Correct Answer: D
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 5
A FortiWeb administrator needs to protect new API endpoints that a development team is publishing. To secure these API endpoints, which three configuration actions should the administrator perform on FortiWeb? (Choose three.)
Correct Answer: C,D,E
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 6
Refer to the exhibit.
You are a FortiWeb administrator. FortiWeb is deployed between a FortiGate and two back-end web servers, as shown in the diagram. No server policies are currently configured on FortiWeb.
While testing, you notice that a student system in the 100.64.0.0/24 network is still able to access the back-end servers in 10.1.1.0/24, even though FortiWeb is not logging or inspecting the traffic.
Which action should you take to ensure FortiWeb blocks or inspects all traffic before it reaches the back-end servers?
You are a FortiWeb administrator. FortiWeb is deployed between a FortiGate and two back-end web servers, as shown in the diagram. No server policies are currently configured on FortiWeb.
While testing, you notice that a student system in the 100.64.0.0/24 network is still able to access the back-end servers in 10.1.1.0/24, even though FortiWeb is not logging or inspecting the traffic.
Which action should you take to ensure FortiWeb blocks or inspects all traffic before it reaches the back-end servers?
Correct Answer: C
Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).
Question 7
An administrator is troubleshooting why FortiWeb is not decrypting HTTPS traffic for inspection in reverse proxy mode. What is the most likely missing configuration?
Correct Answer: A
