Configure Server Objects and Policies NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a single public IP address and hosts two web applications. Application 1 is a public-facing site, and Application 2 is an internal tool that should only be accessible from the corporate network. The administrator wants to use FortiWeb to protect both applications. The corporate network uses the IP range 10.0.0.0/8. What is the most efficient way to configure access control?

   • ACreate a single server pool with all servers and use a load-balancing method to distribute traffic.
   • BCreate two virtual servers on different ports and use firewall policies to restrict access.
   • CCreate a single server policy and use a content routing rule to block requests from outside the corporate network.
   • DCreate two server policies, one for each application, and configure source IP restrictions on the policy for Application 2.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of a server pool in FortiWeb?

   • ATo define a group of backend servers that receive traffic from a virtual server
   • BTo store SSL certificates used for HTTPS traffic
   • CTo define firewall rules that filter traffic to the web server
   • DTo specify the IP address and port on which FortiWeb listens for client requests
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   An administrator is configuring FortiWeb for a multi-tenant environment. Each tenant has its own server pool. The administrator wants to ensure that if one tenant's server pool becomes unhealthy, the other tenants are not affected. What is the best way to achieve this isolation?

   • ACreate a separate server pool for each tenant and a separate server policy for each pool.
   • BCreate a single server pool and use the 'Least Connections' method to balance traffic.
   • CPlace all servers from all tenants in a single server pool and use content routing to direct traffic.
   • DUse a single server policy with multiple protection profiles.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A FortiWeb administrator is configuring a server pool with three backend servers. The administrator wants to ensure that if one server is down, the remaining two servers share the load. Which configuration is required?

   • AConfigure a virtual server with multiple ports.
   • BConfigure a content routing rule to send traffic to the healthy servers.
   • CConfigure a health check on the server pool.
   • DConfigure a load-balancing method and a health check on the server pool.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A FortiWeb administrator is configuring a server policy for a web application that requires client certificate authentication. The administrator has imported the CA certificate and the client certificates. What additional configuration is needed in the server policy to enforce client certificate authentication?

   • AConfigure the server pool to use HTTPS on the backend.
   • BAdd a content routing rule to check for the client certificate.
   • CSet the 'SSL Certificate' option to the client certificate.
   • DSet the 'Client Certificate' option to 'Enable' and select the CA certificate.
   Reveal Solution Discussion Select an answer first