An organization has two FortiWeb appliances in an active-active HA cluster. The administrator notices that the session table is not synchronized between the two units, and some user sessions are being dropped when traffic is load-balanced to the other unit. What is the most likely cause?

Session synchronization is not enabled or is misconfigured.

The heartbeat interface is not configured.

The load-balancing algorithm is set to 'round-robin'.

The virtual IP is not configured on both units.

An organization needs to import a certificate into FortiWeb. The certificate authority provided the certificate in DER format and the private key in PEM format. The administrator must import both into FortiWeb. What should the administrator do?

Convert the PEM private key to DER and import both in DER format.

Import the DER certificate directly and the PEM private key directly.

Convert the DER certificate to PEM, then import the PEM certificate and the PEM private key separately.

Combine the DER certificate and PEM key into a single PKCS#12 file and import that.

After FortiWeb decrypts inbound HTTPS traffic in an SSL offloading configuration, how does it forward the request to the web server?

It forwards the request as plaintext HTTP to the server

It forwards the request using the original encrypted session

It re-encrypts the request and sends it to the server over a new TLS session

It forwards the request without any encryption to the server

A company has two FortiWeb appliances in an HA cluster. The primary appliance fails. The secondary appliance takes over. After the primary is repaired and comes back online, the administrator notices that the configuration on the primary is older than the configuration on the secondary. What should the administrator do to ensure the cluster has the latest configuration?

Do nothing because the cluster will automatically sync the newer configuration to the primary.

Manually synchronize the configuration from the secondary to the primary.

Reset the primary to factory defaults and rejoin the cluster.

Reboot the secondary appliance to force a configuration sync.

FortinetNSE 5 - FortiWeb Administrator

Domain 1Objective 3

Implement SSL Inspection, Offloading, and High Availability (HA) NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Part of the Deployment and Configuration domain, which makes up ~29% of our current practice bank. Fortinet does not publish an official question count, but from its 65-minute exam (~25–45 total, ~7–13 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

9concepts

Questions 1–5

1expert · hard
An organization has two FortiWeb appliances in an active-active HA cluster. The administrator notices that the session table is not synchronized between the two units, and some user sessions are being dropped when traffic is load-balanced to the other unit. What is the most likely cause?
Select an answer first
2application · medium
An organization needs to import a certificate into FortiWeb. The certificate authority provided the certificate in DER format and the private key in PEM format. The administrator must import both into FortiWeb. What should the administrator do?
Select an answer first
3foundation · easy
After FortiWeb decrypts inbound HTTPS traffic in an SSL offloading configuration, how does it forward the request to the web server?
Select an answer first
4application · medium
A company has two FortiWeb appliances in an HA cluster. The primary appliance fails. The secondary appliance takes over. After the primary is repaired and comes back online, the administrator notices that the configuration on the primary is older than the configuration on the secondary. What should the administrator do to ensure the cluster has the latest configuration?
Select an answer first
5foundation · easy
An administrator wants FortiWeb to decrypt inbound HTTPS traffic, inspect the plaintext, and then re-encrypt it before sending it to the web server. Which SSL mode is being described?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTIWEB-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTIWEB-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Implement SSL Inspection, Offloading, and High Availability (HA) NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

An organization has two FortiWeb appliances in an active-active HA cluster. The administrator notices that the session table is not synchronized between the two units, and some user sessions are being dropped when traffic is load-balanced to the other unit. What is the most likely cause?

An organization needs to import a certificate into FortiWeb. The certificate authority provided the certificate in DER format and the private key in PEM format. The administrator must import both into FortiWeb. What should the administrator do?

After FortiWeb decrypts inbound HTTPS traffic in an SSL offloading configuration, how does it forward the request to the web server?

An administrator wants FortiWeb to decrypt inbound HTTPS traffic, inspect the plaintext, and then re-encrypt it before sending it to the web server. Which SSL mode is being described?

Keep studying — Deployment and Configuration