A company wants to ensure that all security events, including DoS attacks and web application firewall (WAF) violations, are logged and can be correlated with user activity. They have a SIEM system that accepts syslog. What should they configure on FortiWeb?

Enable 'Log to FortiAnalyzer' and configure a report.

Enable 'Log to Disk' and set a long retention period.

Enable 'Log to Syslog' and select 'Security Events' as the log type.

Enable 'Debug Logging' and send to syslog.

After a security incident, an administrator needs to determine which source IPs were blocked by FortiWeb's DoS protection and when. They have access to FortiWeb's logs. What is the most efficient way to find this information?

Generate a 'Traffic Report' and filter by source IP.

Use the 'Log Access' page to search for events with 'Action = Block' and 'Type = DoS'.

Create a 'Security Report' and select 'Top Attackers'.

Enable 'Debug Logging' and review the system logs.

A security team wants to use FortiAI to automatically analyze web traffic patterns and provide recommendations for improving the security posture of their FortiWeb-protected applications. They have already deployed FortiAI in their network. What must be done on FortiWeb to enable this integration?

Enable the 'AI Detection' toggle in each web protection profile.

Configure the FortiAI server IP address and API token in the FortiWeb system settings.

Create a new log policy that forwards all traffic logs to FortiAI.

Install a FortiAI connector on the same server as FortiWeb.

When configuring a DoS protection policy in FortiWeb, what is the purpose of setting a threshold?

To set the logging level for security events

To determine which web pages are cached

To specify the maximum number of concurrent connections allowed from a single IP address

To define the encryption strength for SSL/TLS sessions

FortinetNSE 5 - FortiWeb Administrator

Domain 3Objective 2

Implement Denial of Service (DoS), Logging, and FortiAI NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Part of the Application Delivery and Additional Configuration domain, which makes up ~17% of our current practice bank. Fortinet does not publish an official question count, but from its 65-minute exam (~25–45 total, ~4–8 in this domain), expect 2–4 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

7concepts

Questions 1–5

1application · medium
A company wants to ensure that all security events, including DoS attacks and web application firewall (WAF) violations, are logged and can be correlated with user activity. They have a SIEM system that accepts syslog. What should they configure on FortiWeb?
Select an answer first
2application · medium
After a security incident, an administrator needs to determine which source IPs were blocked by FortiWeb's DoS protection and when. They have access to FortiWeb's logs. What is the most efficient way to find this information?
Select an answer first
3foundation · easy
Which FortiWeb feature is used to create and manage DoS protection policies?
Select an answer first
4application · medium
A security team wants to use FortiAI to automatically analyze web traffic patterns and provide recommendations for improving the security posture of their FortiWeb-protected applications. They have already deployed FortiAI in their network. What must be done on FortiWeb to enable this integration?
Select an answer first
5foundation · easy
When configuring a DoS protection policy in FortiWeb, what is the purpose of setting a threshold?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTIWEB-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTIWEB-ADMINISTRATOR” is a trademark of its owner, used for identification only.