Free Preparation Discussions
MENU
Fortinet NSE5_FWB_AD-8.0 Exam Questions
- Fortinet Certified Professional Certifications
- Fortinet FCP Fortinet Certified Professional Cloud Security Certifications
- Topic 1: Deployment and configuration: Covers setting up FortiWeb deployment modes and basic administration, configuring server objects and security policies, and implementing SSL inspection, offloading, and high availability (HA).
- Topic 2: Web application and API security with botnet mitigation: Covers applying web application security controls, configuring API discovery and protection, and implementing bot mitigation techniques.
- Topic 3: Application delivery and additional configuration: Covers optimizing application delivery performance and implementing denial of service (DoS) protection, logging, and FortiAI features.
- Topic 4: Compliance and troubleshooting: Covers troubleshooting deployment and system-related issues, along with implementing web vulnerability scans for compliance.
Free Fortinet NSE5_FWB_AD-8.0 Exam Actual Questions
Note: Premium Questions for NSE5_FWB_AD-8.0 were last updated On Jul. 13, 2026 (see below)
You are setting up a FortiWeb policy to protect a customer login portal. Users connect to https://login.training.lab, and you want FortiWeb to forward those requests to a load-balanced pool of back-end servers.
Which three components must you configure to complete the server policy?
A FortiWeb server policy binds the listener, destination pool, and service handling required for traffic flow. The virtual server defines the public-facing listener where client traffic arrives. The server pool defines the real back-end servers or load-balanced pool where FortiWeb forwards accepted traffic. The service or port settings define whether FortiWeb handles HTTP, HTTPS, or another configured service. A WAF profile is important for security inspection, but the question asks for the three components needed to complete the forwarding policy. DNS resolver, URL rewrite, health checks, IPsec tunnels, and static routes may be useful in some deployments, but they are not the required core components of the server policy.
================
A third-party penetration test reveals that users can bypass login controls through a mobile API. Your current FortiWeb configuration includes zero trust network access (ZTNA) profiles and cookie security, but API protection and client management are not enabled. The security team asks you to recommend the most effective way to close this gap.
Which FortiWeb adjustment would best prevent future unauthorized API access?
The issue is unauthorized access through a mobile API, so the control must enforce API-specific identity and access rules. FortiWeb API protection can validate API structure, methods, paths, and authorization requirements, while client management can help associate requests with legitimate clients or authenticated users. ZTNA profiles and cookie security can help with access and session protection, but they do not replace API-specific authorization controls. Switching reverse-proxy mode to bypass cookie controls makes no sense and could weaken protection. Replacing ZTNA with bot protection addresses a different problem: automation, not API authorization. Logging only records activity after the fact and does not prevent bypass. The correct action is to enable API protection and client management for mobile API traffic.
================
Refer to the exhibits.
A new domain, https://finance.fortinet.demo, was added but not explicitly mapped. Users report the site loads correctly, but you're unsure which back-end server is being used.
Why is this request succeeding despite no explicit routing rule for finance.fortinet.demo?
The exhibit shows FortiWeb using HTTP content routing, with multiple routing policies and one policy marked as the default. The domain finance.fortinet.demo does not match the explicit routing rules shown, so FortiWeb falls back to the default HTTP content routing entry. In the policy table, app_server_1 is marked as the default route, meaning unmatched requests are sent to that server pool. The certificate does not determine back-end routing; it only supports TLS identity. FortiWeb does not automatically create routing policies for new domains, and the request is not passed to FortiGate for secondary content routing. Because no explicit hostname match exists, the default content routing policy handles the request.
================
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Currently there are no comments in this discussion, be the first to comment!