A FortiWeb HA cluster is running in active-passive mode. The administrator wants to verify that session failover is working correctly. What should the administrator check to confirm that existing client sessions are preserved during a failover?

Verify that session synchronization is enabled and that the session table is being replicated to the standby unit.

Check that the heartbeat interface is configured with a high priority.

Ensure that the configuration synchronization interval is set to 1 second.

Confirm that the virtual cluster IP is configured on both units.

A FortiWeb HA cluster in active-passive mode experiences a failover. After the failover, the new active unit is not passing traffic correctly. The administrator checks the cluster status and sees that the new active unit is in 'active' state but the virtual IP is not responding. What is the most likely cause?

The virtual IP is not configured on the new active unit's interface.

The heartbeat interface is down on the new active unit.

The configuration synchronization failed before the failover.

The new active unit is in 'standby' state despite showing 'active'.

A company is deploying FortiWeb for SSL offloading. The web application uses client certificates for authentication. The administrator must ensure that FortiWeb forwards the client certificate to the backend server after decryption. What must be configured?

Disable client certificate authentication because it is incompatible with SSL offloading.

Enable 'Client Certificate' in the SSL inspection policy and configure the header to pass the certificate to the backend.

Configure the backend server to request the client certificate directly.

Use SSL bridging so the client certificate is passed through unchanged.

A customer provides FortiWeb with a certificate in PKCS#12 format (.pfx file) that includes the private key. The administrator needs to import this into FortiWeb. What additional information is required during the import process?

The certificate's common name (CN).

The certificate's serial number.

The password used to encrypt the PKCS#12 file.

FortinetNSE 5 - FortiWeb Administrator

Domain 1Objective 3

Implement SSL Inspection, Offloading, and High Availability (HA) NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 3)

Part of the Deployment and Configuration domain, which makes up ~29% of our current practice bank. Fortinet does not publish an official question count, but from its 65-minute exam (~25–45 total, ~7–13 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

9concepts

Questions 11–15

11application · medium
A FortiWeb HA cluster is running in active-passive mode. The administrator wants to verify that session failover is working correctly. What should the administrator check to confirm that existing client sessions are preserved during a failover?
Select an answer first
12application · medium
A FortiWeb administrator is configuring SSL inspection for outbound traffic. The company's security policy requires that users be warned, but not blocked, when a website presents a certificate that is not trusted. What action should be configured in the SSL inspection policy for 'Untrusted Certificate'?
Select an answer first
13expert · hard
A FortiWeb HA cluster in active-passive mode experiences a failover. After the failover, the new active unit is not passing traffic correctly. The administrator checks the cluster status and sees that the new active unit is in 'active' state but the virtual IP is not responding. What is the most likely cause?
Select an answer first
14expert · hard
A company is deploying FortiWeb for SSL offloading. The web application uses client certificates for authentication. The administrator must ensure that FortiWeb forwards the client certificate to the backend server after decryption. What must be configured?
Select an answer first
15application · medium
A customer provides FortiWeb with a certificate in PKCS#12 format (.pfx file) that includes the private key. The administrator needs to import this into FortiWeb. What additional information is required during the import process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE5-FORTIWEB-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTIWEB-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Implement SSL Inspection, Offloading, and High Availability (HA) NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

A FortiWeb HA cluster is running in active-passive mode. The administrator wants to verify that session failover is working correctly. What should the administrator check to confirm that existing client sessions are preserved during a failover?

A company is deploying FortiWeb for SSL offloading. The web application uses client certificates for authentication. The administrator must ensure that FortiWeb forwards the client certificate to the backend server after decryption. What must be configured?

A customer provides FortiWeb with a certificate in PKCS#12 format (.pfx file) that includes the private key. The administrator needs to import this into FortiWeb. What additional information is required during the import process?

Keep studying — Deployment and Configuration