What is the primary purpose of an SSL inspection policy in FortiWeb?

To set the encryption algorithm for the web server's TLS sessions

To define the web server's SSL certificate and private key

To specify which traffic should be decrypted and how to handle certificates

To configure the firewall rules for inbound and outbound traffic

An administrator needs to replace a certificate on FortiWeb that is used for SSL offloading. The new certificate is in PEM format and includes the full certificate chain (server cert + intermediate + root). The private key is in a separate PEM file. What is the correct way to import this into FortiWeb?

Import the PEM file containing the full chain as the certificate and the separate PEM file as the private key.

Convert the private key to PKCS#12 and import it with the certificate.

Import only the server certificate and ignore the chain.

Split the chain into separate files and import each certificate individually.

A company operates a mission-critical web application behind a FortiWeb HA cluster in active-passive mode. The administrator needs to perform maintenance on the active unit, which will require a reboot. The maintenance window allows for minimal downtime. What is the best approach to minimize service interruption?

Reboot the active unit directly and let the cluster fail over automatically.

Manually trigger a failover to the standby unit before starting maintenance.

Shut down the standby unit first, then reboot the active unit.

Disable HA and run the active unit standalone during maintenance.

A FortiWeb administrator is configuring SSL inspection for outbound HTTPS traffic from internal users to the internet. The administrator wants FortiWeb to validate the server certificates of external websites against trusted CAs. What must be configured to ensure this validation happens?

Import the trusted CA certificates into FortiWeb and enable server certificate validation in the SSL inspection policy.

Enable 'Allow Invalid Certificates' in the SSL inspection policy.

Use a self-signed certificate on FortiWeb for the inspection policy.

Configure the SSL inspection policy to use 'Bypass' for all external sites.

When configuring SSL offloading in FortiWeb, which two components are required to decrypt inbound HTTPS traffic?

A wildcard certificate and a certificate revocation list

A certificate signing request and a private key

A server certificate and a private key

A client certificate and a CA certificate

FortinetNSE 5 - FortiWeb Administrator

Domain 1Objective 3

Implement SSL Inspection, Offloading, and High Availability (HA) NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 2)

Part of the Deployment and Configuration domain, which makes up ~29% of our current practice bank. Fortinet does not publish an official question count, but from its 65-minute exam (~25–45 total, ~7–13 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

9concepts

Questions 6–10

6foundation · easy
What is the primary purpose of an SSL inspection policy in FortiWeb?
Select an answer first
7application · medium
An administrator needs to replace a certificate on FortiWeb that is used for SSL offloading. The new certificate is in PEM format and includes the full certificate chain (server cert + intermediate + root). The private key is in a separate PEM file. What is the correct way to import this into FortiWeb?
Select an answer first
8expert · hard
A company operates a mission-critical web application behind a FortiWeb HA cluster in active-passive mode. The administrator needs to perform maintenance on the active unit, which will require a reboot. The maintenance window allows for minimal downtime. What is the best approach to minimize service interruption?
Select an answer first
9application · medium
A FortiWeb administrator is configuring SSL inspection for outbound HTTPS traffic from internal users to the internet. The administrator wants FortiWeb to validate the server certificates of external websites against trusted CAs. What must be configured to ensure this validation happens?
Select an answer first
10foundation · easy
When configuring SSL offloading in FortiWeb, which two components are required to decrypt inbound HTTPS traffic?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTIWEB-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTIWEB-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Implement SSL Inspection, Offloading, and High Availability (HA) NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

What is the primary purpose of an SSL inspection policy in FortiWeb?

A FortiWeb administrator is configuring SSL inspection for outbound HTTPS traffic from internal users to the internet. The administrator wants FortiWeb to validate the server certificates of external websites against trusted CAs. What must be configured to ensure this validation happens?

When configuring SSL offloading in FortiWeb, which two components are required to decrypt inbound HTTPS traffic?

Keep studying — Deployment and Configuration