Instantly download NSE5_FWB_AD-8.0 training test engine

You are a FortiWeb administrator investigating an SQL injection attack on your company's customer portal. The network firewall and intrusion prevention system (IPS) did not stop the attack.
You decide to deploy a web application firewall (WAF) to help prevent this type of attack.
Which two actions can you take to block application-layer threats? (Choose two.)

• A. Filter and analyze HTTP/S requests to block attacks targeting the web server.
• B. Detect and block threats like SQL injection, cross-site scripting (XSS), and other layer 7 attacks.
• C. Focus on client-side risks, such as protecting user browsers.
• D. Inspect general network traffic equally between clients and servers.

You recently deployed two FortiWeb devices in an active-active (A-A) high availability (HA) cluster.
During routine maintenance, you want to confirm that the cluster is synchronizing the correct configuration areas and that both FortiWeb devices behave consistently in production.
As the FortiWeb administrator, which two configuration areas should you examine to verify that HA synchronization is functioning correctly? (Choose two.)

• A. Verify whether firmware images and upgrade history are synchronized between the FortiWeb devices.
• B. Check the network configuration on both FortiWeb devices-such as interfaces and static routes-to ensure they are aligned.
• C. Review inspection and mitigation log files to determine if they are being replicated across both FortiWeb devices.
• D. Review policy configurations, including server policies and protection profiles, to confirm they match across the cluster.

Drag and Drop Question
Refer to the exhibit.

You are reviewing the FortiWeb integration with the Advanced Bot Protection (ABP) service.
Match each step in the ABP flow with its description.
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the six correct steps in order, placing the first step in the position which is labeled as step 1.
Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop six steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.

Your security team is reviewing tools for artificial intelligence (AI) integration and wants to ensure no real user or IP data is exposed to third-party services. How does FortiAI meet this requirement better than traditional external AI tools?

• A. FortiAI blocks all network access during queries.
• B. Only masked prompts go to the LLM; unmasking happens locally.
• C. It encrypts data using a cloud-based key.
• D. The large language model (LLM) receives IP addresses from only the internal DNS.

Which two statements are true regarding FortiWeb operating in Offline Protection mode? (Choose two.)

• A. FortiWeb performs full SSL termination and decryption.
• B. FortiWeb monitors a copy of traffic via a switch SPAN or mirror port.
• C. FortiWeb can block malicious traffic in real time.
• D. FortiWeb can reset the connection to interrupt an attack after detection.