Troubleshoot Deployment and System-Related Issues NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A FortiWeb administrator is troubleshooting a web application that is being blocked by a 'HTTP Protocol Constraint' rule. The administrator checks the 'Attack Log' and sees that the 'Maximum Request Line Length' constraint is being triggered. The application uses long URLs for search queries. What should the administrator do?

   • AChange the action of the constraint from 'Block' to 'Alert'.
   • BCreate a new web protection policy for the application and assign a profile with a higher limit.
   • CIncrease the 'Maximum Request Line Length' value in the security profile.
   • DDisable the 'HTTP Protocol Constraint' feature in the security profile.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A FortiWeb administrator is troubleshooting a web application that is being incorrectly blocked by a 'Machine Learning' model. The administrator wants to exclude a specific URL from the machine learning inspection while keeping it enabled for other URLs. What should the administrator do?

   • ADelete the machine learning model and recreate it.
   • BAdd the URL to the 'Machine Learning Exception' list in the security profile.
   • CDisable the 'Machine Learning' feature in the security profile.
   • DChange the machine learning action from 'Block' to 'Alert'.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A FortiWeb administrator notices that the 'Signature Update' status shows 'Failed' in the GUI. The appliance has internet connectivity, and the administrator can ping the FortiGuard update server. What should the administrator check next?

   • ACheck the system log for a specific error message about the update failure.
   • BVerify that the FortiGuard update server is reachable on the correct port (e.g., HTTPS port 443) and that the update schedule is configured.
   • CDisable the firewall policy that controls outbound traffic from the FortiWeb.
   • DReboot the FortiWeb to reset the update process.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A FortiWeb administrator updates the IPS signature database, but after the update, a legitimate web application starts returning false positives for a custom rule. The administrator wants to exclude the specific URL from this rule without disabling the entire signature. What should the administrator do?

   • AChange the action of the security profile from 'Block' to 'Alert' for all signatures.
   • BAdd the URL to the 'Exception' list of the specific signature in the security profile.
   • CDelete the custom rule and recreate it with a different signature ID.
   • DDisable the entire IPS signature database to stop all false positives.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's FortiWeb appliance is deployed in reverse-proxy mode. Users report intermittent timeouts when accessing a web application, but the FortiWeb GUI remains responsive. The network team confirms the upstream web server is healthy. The FortiWeb administrator checks the routing table and sees a default route, but the interface connected to the web server shows a high error counter. Which action should the administrator take first?

   • ACheck the interface statistics for CRC errors or duplex mismatches on the link to the web server.
   • BAdd a second default route to provide redundancy for the web server traffic.
   • CDisable the web protection policy temporarily to see if the timeouts stop.
   • DReboot the FortiWeb appliance to clear the interface error counters.
   Reveal Solution Discussion Select an answer first