Troubleshoot Deployment and System-Related Issues NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A FortiWeb administrator is troubleshooting a web application that is being blocked by a custom signature. The signature is correctly written and enabled in the profile. The administrator wants to allow a specific parameter value to bypass the signature, but only for a specific URL. What should the administrator do?

   • ADisable the custom signature in the profile.
   • BCreate a new web protection policy for the specific URL and assign a profile without the custom signature.
   • CAdd an exception to the custom signature that specifies the URL and the parameter value.
   • DChange the action of the custom signature from 'Block' to 'Alert'.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A FortiWeb administrator notices that traffic is not reaching the web server behind the device. The FortiWeb interface connected to the server is up, and the server's IP is correctly configured as the next-hop gateway. Which command should the administrator use to verify that FortiWeb can reach the server at the IP layer?

   • Aexecute ping <server-ip>
   • Bget system interface physical
   • Cdiagnose sniffer packet any "host <server-ip>" 3
   • Dexecute traceroute <server-ip>
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A FortiWeb administrator is troubleshooting a web application that is being blocked by a 'URL Access' rule. The administrator wants to allow a specific IP address to bypass this rule for testing purposes. What should the administrator do?

   • ACreate a new 'URL Access' rule with a higher priority that allows the specific IP address.
   • BDisable the 'URL Access' rule that is blocking the traffic.
   • CAdd the IP address to the 'Trusted IP' list in the security profile.
   • DChange the action of the blocking rule from 'Block' to 'Alert'.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   A FortiWeb administrator is troubleshooting why a security profile is not blocking a known attack. The signature database is up to date, and the profile is assigned to the correct policy. What is the most likely cause?

   • AThe signature is not in the global database.
   • BThe signature is disabled in the profile.
   • CThe signature database is not licensed.
   • DThe profile is not the default profile.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A FortiWeb administrator notices that a web protection policy is not blocking requests that should be caught by a specific rule. The rule is enabled and the action is set to 'Alert'. What is the most likely reason the requests are not being blocked?

   • AThe rule is not assigned to any protection profile.
   • BThe rule action is set to 'Alert', which only logs the event without blocking.
   • CThe web protection policy is not applied to the virtual server.
   • DThe rule is disabled in the global settings.
   Reveal Solution Discussion Select an answer first