Configure Server Objects and Policies NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · easy

   An administrator is configuring FortiWeb for a new application. The application will be accessed via a public IP address. The administrator has created a server pool named 'AppPool' with the backend servers. What is the next step to make the application accessible to external clients?

   • AConfigure a health check on 'AppPool'.
   • BCreate a virtual server and bind the public IP and port to 'AppPool'.
   • CAdd a content routing rule to 'AppPool'.
   • DCreate a server policy and assign it to 'AppPool'.
   Reveal Solution Discussion Select an answer first
2. 2application · hard

   A FortiWeb administrator is configuring a server pool for a critical application. The backend servers are located in two different data centers. The administrator wants to ensure that if the primary data center becomes unreachable, traffic is automatically sent to the secondary data center. Which configuration best meets this requirement?

   • AAdd all servers from both data centers to a single server pool and configure the load-balancing method as 'Round Robin'.
   • BCreate two server pools and configure a virtual server for each, then use a firewall rule to fail over.
   • CCreate two server pools, one for each data center, and use HTTP content routing to send traffic to the primary pool.
   • DAdd all servers to a single server pool and configure the load-balancing method as 'Weighted' with a higher weight for the primary data center servers.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An organization hosts two different web applications on the same FortiWeb device. Application A is accessed via 'app1.example.com' and Application B via 'app2.example.com'. Both applications have their own server pools. The administrator wants to route requests to the correct pool based on the hostname in the HTTP request. What should be configured?

   • AA single server policy with HTTP content routing rules that match the 'Host' header and direct traffic to the appropriate pool.
   • BA single server pool containing all servers from both applications, with a load-balancing method.
   • CTwo virtual servers, one for each hostname, each bound to the respective server pool.
   • DTwo server policies, one for each application, and bind them to the same virtual server.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization runs a public-facing web application behind FortiWeb. The security team requires that all traffic to the application be encrypted in transit. The current FortiWeb configuration has a server policy that uses HTTP only. The administrator needs to modify the configuration to enforce HTTPS while keeping the existing protection profiles. What is the most efficient way to achieve this?

   • AChange the virtual server's port from 80 to 443 and leave the server policy as HTTP.
   • BCreate a new server policy with HTTPS enabled and assign the same protection profiles, then delete the old HTTP policy.
   • CConfigure a content routing rule to redirect all HTTP requests to HTTPS and leave the server policy unchanged.
   • DEdit the existing server policy and change the protocol from HTTP to HTTPS, then upload or select an SSL certificate.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is deploying FortiWeb in a transparent proxy mode. The web server's IP address is 192.168.1.10 and it listens on port 8080. The administrator needs to configure FortiWeb so that clients can access the web server using the IP 192.168.1.10 on port 80. What must be configured?

   • AA content routing rule that translates port 80 to port 8080.
   • BA server policy with source IP 192.168.1.10 and destination port 80, and a server pool with port 8080.
   • CA server pool with the web server's IP and port 80, and a virtual server on port 8080.
   • DA virtual server with IP 192.168.1.10 and port 80, bound to a server pool containing the web server on port 8080.
   Reveal Solution Discussion Select an answer first