Troubleshoot Deployment and System-Related Issues NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–19

1. 16foundation · easy

   A FortiWeb administrator is troubleshooting a link failure on an aggregated interface. The physical member ports are up, but the aggregate link is down. What is the most likely cause of this issue?

   • AThe member ports have different speeds.
   • BThe member ports are in different VLANs.
   • CThe aggregate interface has no IP address configured.
   • DThe LACP mode is set to passive on both ends.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A FortiWeb appliance is deployed in reverse-proxy mode with two interfaces: one connected to the internet and one to the internal network. The administrator can access the FortiWeb GUI from the internal network, but external users cannot reach the web application. The administrator checks the firewall policy and confirms it is configured correctly. The external interface has a public IP, and the internal server is reachable from the FortiWeb. What is the most likely cause?

   • AThe web protection policy is set to 'Alert' instead of 'Block'.
   • BThe internal server's default gateway is not set to the FortiWeb's internal interface.
   • CThe DNS record for the public IP is not pointing to the FortiWeb's external interface.
   • DThe NAT policy is not configured to translate the destination IP to the internal server's IP address.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A FortiWeb administrator has created a custom signature to block a specific attack pattern. The signature is enabled in the security profile, but traffic matching the pattern is not being blocked. The administrator verifies that the signature is correctly written and the profile is assigned to the policy. What should the administrator check next?

   • AReboot the FortiWeb to load the new signature into memory.
   • BDisable the 'Machine Learning' feature, as it may override custom signatures.
   • CVerify that the signature is enabled in the 'Signature' section of the security profile and that the profile is applied to the correct policy.
   • DCheck the system time on the FortiWeb to ensure the signature is not time-restricted.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A FortiWeb administrator is troubleshooting a web application that is being incorrectly blocked. The administrator checks the 'Attack Log' and sees that the traffic is being blocked by a 'HTTP Protocol Constraint' rule. The application uses a large number of headers. What is the most likely cause?

   • AThe FortiWeb appliance is running out of memory due to the large headers.
   • BThe web protection policy is set to 'Block' instead of 'Alert'.
   • CThe 'Maximum HTTP Header Count' constraint is set too low for the application's needs.
   • DThe signature database is outdated and does not recognize the application's headers.
   Reveal Solution Discussion Select an answer first