A financial services company runs a public-facing web application behind FortiWeb. During a recent sales event, the application became slow and some users were unable to complete transactions. Analysis of network traffic shows a high volume of HTTP requests from a small set of IP addresses, each request following a similar pattern but with slight variations in URL parameters. The company wants to mitigate this without blocking legitimate users who may share a NAT IP. What should you configure?

Enable 'Block Malformed Requests' in the DoS policy to drop any request with unusual parameters.

Set the 'Connection Rate Limit' to a low value for all source IPs in the DoS policy.

Create a DoS policy with a source-based threshold for 'HTTP Request Rate' and enable 'Rate Control' with a burst size.

Enable the HTTP protocol constraint for 'Max URL Length' and set a low threshold.

A security analyst notices unusual traffic patterns in FortiWeb logs and suspects a new type of attack. They want to use FortiAI to get automated analysis and recommendations. What should they do?

Enable 'FortiAI Analysis' in the FortiWeb log settings.

Check the FortiAI dashboard in FortiWeb for recommendations.

Ensure FortiAI is integrated and review the AI-generated insights in the FortiWeb GUI.

Manually export the logs and upload them to FortiAI.

A security team is investigating a breach that occurred three months ago. They have FortiWeb logs stored locally, but the logs have rotated and the relevant period is no longer available. They also have a FortiAnalyzer that receives logs from FortiWeb. What should they do to retrieve the historical logs?

Recover the logs from the FortiWeb disk using forensic tools.

Use the FortiWeb backup file to restore the logs.

Check the FortiAnalyzer for logs from that period, as it may have a longer retention policy.

Contact Fortinet support to retrieve the logs from the cloud.

What is the primary purpose of a DoS protection policy in FortiWeb?

To authenticate users before they access protected resources

To encrypt traffic between clients and the web server

To mitigate various types of denial of service attacks by applying rate-based and anomaly-based protections

To block all traffic from a specific geographic region

FortinetNSE 5 - FortiWeb Administrator

Domain 3Objective 2

Implement Denial of Service (DoS), Logging, and FortiAI NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 3)

Part of the Application Delivery and Additional Configuration domain, which makes up ~17% of our current practice bank. Fortinet does not publish an official question count, but from its 65-minute exam (~25–45 total, ~4–8 in this domain), expect 2–4 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

7concepts

Questions 11–15

11application · medium
A financial services company runs a public-facing web application behind FortiWeb. During a recent sales event, the application became slow and some users were unable to complete transactions. Analysis of network traffic shows a high volume of HTTP requests from a small set of IP addresses, each request following a similar pattern but with slight variations in URL parameters. The company wants to mitigate this without blocking legitimate users who may share a NAT IP. What should you configure?
Select an answer first
12foundation · easy
Which FortiWeb feature allows you to view graphical representations of log data?
Select an answer first
13application · medium
A security analyst notices unusual traffic patterns in FortiWeb logs and suspects a new type of attack. They want to use FortiAI to get automated analysis and recommendations. What should they do?
Select an answer first
14expert · hard
A security team is investigating a breach that occurred three months ago. They have FortiWeb logs stored locally, but the logs have rotated and the relevant period is no longer available. They also have a FortiAnalyzer that receives logs from FortiWeb. What should they do to retrieve the historical logs?
Select an answer first
15foundation · easy
What is the primary purpose of a DoS protection policy in FortiWeb?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTIWEB-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTIWEB-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Implement Denial of Service (DoS), Logging, and FortiAI NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

Which FortiWeb feature allows you to view graphical representations of log data?

A security analyst notices unusual traffic patterns in FortiWeb logs and suspects a new type of attack. They want to use FortiAI to get automated analysis and recommendations. What should they do?

What is the primary purpose of a DoS protection policy in FortiWeb?

Keep studying — Application Delivery and Additional Configuration