An administrator is setting up a new FortiWeb HA cluster with two appliances. The appliances are connected via a dedicated heartbeat interface. The administrator needs to configure a virtual cluster IP address that clients will use to access the web application. Where should this virtual IP be configured?

On the secondary FortiWeb appliance's heartbeat interface.

On both appliances' heartbeat interfaces.

On the upstream router as a static route.

On the primary FortiWeb appliance's interface that faces the client network.

A financial services company must inspect all inbound HTTPS traffic for SQL injection and XSS attacks. The backend web servers are legacy and cannot handle re-encryption. The compliance team requires that the data be encrypted in transit between FortiWeb and the backend servers. Which SSL mode should the administrator choose?

SSL termination with no re-encryption

SSL offloading (plain HTTP to backend)

SSL inspection (re-encrypt to backend)

A FortiWeb administrator is creating an SSL inspection policy. The requirement is to decrypt all inbound HTTPS traffic except traffic destined for the /healthcheck path, which must pass through without inspection. The policy must also block sessions when the server certificate is expired. How should the administrator configure the policy?

Configure the policy to inspect all traffic and rely on the web server to respond to /healthcheck without TLS.

Set the policy action to 'Bypass' and enable 'Inspect' only for the /healthcheck path.

Create a policy that matches all traffic, set the action to 'Inspect', and add an exception rule for /healthcheck with action 'No Inspection'.

Create two separate virtual servers: one for /healthcheck with SSL bridging and one for all other traffic with SSL offloading.

FortinetNSE 5 - FortiWeb Administrator

Domain 1Objective 3

Implement SSL Inspection, Offloading, and High Availability (HA) NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 4)

Part of the Deployment and Configuration domain, which makes up ~29% of our current practice bank. Fortinet does not publish an official question count, but from its 65-minute exam (~25–45 total, ~7–13 in this domain), expect 2–4 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

9concepts

Questions 16–18

16application · medium
An administrator is setting up a new FortiWeb HA cluster with two appliances. The appliances are connected via a dedicated heartbeat interface. The administrator needs to configure a virtual cluster IP address that clients will use to access the web application. Where should this virtual IP be configured?
Select an answer first
17application · medium
A financial services company must inspect all inbound HTTPS traffic for SQL injection and XSS attacks. The backend web servers are legacy and cannot handle re-encryption. The compliance team requires that the data be encrypted in transit between FortiWeb and the backend servers. Which SSL mode should the administrator choose?
Select an answer first
18application · medium
A FortiWeb administrator is creating an SSL inspection policy. The requirement is to decrypt all inbound HTTPS traffic except traffic destined for the /healthcheck path, which must pass through without inspection. The policy must also block sessions when the server certificate is expired. How should the administrator configure the policy?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to NSE5-FORTIWEB-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE5-FORTIWEB-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Implement SSL Inspection, Offloading, and High Availability (HA) NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–18

Keep studying — Deployment and Configuration