Troubleshoot Deployment and System-Related Issues NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A FortiWeb appliance is deployed in reverse-proxy mode. The administrator notices that the FortiWeb is not receiving traffic from the internet, but the interface is up and has a public IP. The administrator checks the firewall policy and confirms it is configured correctly. What should the administrator check next?

   • ACheck the routing table on the FortiWeb for a default route.
   • BDisable the firewall policy to allow all traffic through.
   • CReboot the FortiWeb to reset the network stack.
   • DVerify that the upstream router or firewall is forwarding traffic to the FortiWeb's public IP address.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A FortiWeb administrator is troubleshooting a web application that is not being protected by a security profile. The profile is assigned to the policy, and the policy is enabled. The administrator checks the 'Attack Log' and sees no entries for the application. What should the administrator check next?

   • AReboot the FortiWeb to reload the policy configuration.
   • BCheck the system time on the FortiWeb to ensure the policy is not time-restricted.
   • CVerify that the policy is matched by the traffic by checking the 'Policy Hit' counter in the policy list.
   • DDisable and re-enable the policy to reset its state.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A FortiWeb administrator is troubleshooting a web application that is not being protected by a custom signature. The signature is enabled in the profile, and the profile is assigned to the policy. The administrator checks the 'Attack Log' and sees no entries for the signature. What should the administrator check next?

   • ACheck the system time on the FortiWeb to ensure the signature is not time-restricted.
   • BVerify that the custom signature is correctly written and that the pattern matches the traffic.
   • CDisable and re-enable the signature in the profile.
   • DReboot the FortiWeb to reload the signature configuration.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A FortiWeb appliance is deployed with two WAN links for redundancy. The administrator notices that traffic is not failing over to the secondary link when the primary link goes down. The link status shows 'down' for the primary interface, but the secondary interface is 'up'. What should the administrator check?

   • ACheck the routing table for a static route to the secondary link.
   • BVerify that link failover is enabled in the network settings and that the secondary link is configured as a valid failover path.
   • CReboot the FortiWeb to force a failover.
   • DDisable the primary link in the GUI to force the secondary link to take over.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A FortiWeb appliance is deployed in transparent mode. The administrator notices that traffic from a specific VLAN is not being processed, while other VLANs work fine. The interface is up, and the VLAN is configured on the FortiWeb. What should the administrator check next?

   • ACheck the routing table for a route to the VLAN subnet.
   • BVerify that the VLAN ID is allowed on the upstream switch port and that the FortiWeb interface is configured for the correct VLAN.
   • CDisable the firewall policy for the VLAN to allow all traffic through.
   • DReboot the FortiWeb to reload the VLAN configuration.
   Reveal Solution Discussion Select an answer first