Fortinet NSE5_FWB_AD-8.0 Exam Overview:
| Certification Vendor: | Fortinet |
| Exam Name: | Fortinet NSE 5 - FortiWeb 8.0 Administrator |
| Exam Number: | NSE5_FWB_AD-8.0 |
| Real Exam Qty: | 35–40 |
| Related Certifications: | Fortinet Certified Professional (FCP) in Cloud Security |
| Exam Format: | Multiple choice, Multiple response, Scenario-based questions |
| Passing Score: | Pass/Fail (no specific score disclosed) |
| Exam Price: | $200 USD |
| Available Languages: | English |
| Certificate Validity Period: | 2 years |
| Exam Duration: | 75 minutes |
| Recommended Training: | Fortinet Training - FortiWeb Administrator |
| Exam Registration: | Pearson VUE Registration |
| Sample Questions: | Fortinet NSE5_FWB_AD-8.0 Sample Questions |
| Exam Way: | Online proctored (Pearson VUE OnVUE) or physical test center |
| Pre Condition: | Recommended: 3 years networking experience, 1 year network security experience, 6+ months hands-on FortiWeb experience; no mandatory prerequisites |
| Official Syllabus URL: | https://training.fortinet.com/local/staticpage/view.php?page=fortiweb_administrator_exam |
Fortinet NSE5_FWB_AD-8.0 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Web Application and API Security with Bot Mitigation | 35% | - Web application security measures
|
| Compliance and Troubleshooting | 15% | - System and traffic troubleshooting
|
| Application Delivery and Additional Configuration | 20% | - Performance and delivery optimization
|
| Deployment and Configuration | 30% | - Deployment modes and basic administration
|
Fortinet NSE 5 - FortiWeb 8.0 Administrator Sample Questions:
1. Which URL should you rewrite to reduce security risk?
A) https://www.example.com/products/today
B) https://www.example.com/about/team
C) https://www.example.com/25.3.6/Browse/MediaData
D) https://www.example.com/wordpress/?feed=rss2
2. A FortiWeb administrator wants to stop coordinated scraping traffic coming from several IP addresses, each making only a few requests so thresholds never trigger. Which tactic should the administrator deploy to identify botnets using shared behavioral signals instead of volume?
A) A static blocklist for all IP addresses seen in logs, even if most appear only once
B) A DoS protection profile with extremely low request limits for the entire site
C) Bot mitigation with device fingerprinting to correlate clients by behavior, headers, and JS challenges instead of IP address volume
D) A web application firewall (WAF) rule that blocks every user agent that is not on a manually created allowlist
3. Which situation best explains when a FortiWeb administrator should enable automatic HTTP-to- HTTPS redirection?
A) The back-end server uses only HTTP and cannot support encryption.
B) Users are accessing a static website that does not handle sensitive data.
C) The web application handles logins or personal data and must ensure encrypted communication.
D) The organization prefers to keep both HTTP and HTTPS available for flexibility.
4. Your company hosts two different web applications: a shopping site and a blog. You want FortiWeb to apply different protection profiles and forwarding rules to each application. How should you configure FortiWeb to support this?
A) Configure one server pool but assign different firewall policies.
B) Use one server policy with different virtual IP addresses.
C) Use source network address translation (SNAT) with web caching to split the requests.
D) Create a separate server policy for each application.
5. In a FortiWeb HA active-active configuration, which statement is accurate?
A) Active-active mode is only supported in transparent bridge mode.
B) Only one unit processes traffic while the other remains completely idle.
C) Active-active requires manual failover initiated by the administrator.
D) All members can process traffic simultaneously, improving throughput while still providing redundancy.
Solutions:
| Question # 1 Answer: C | Question # 2 Answer: C | Question # 3 Answer: C | Question # 4 Answer: D | Question # 5 Answer: D |

We're so confident of our products that we provide no hassle product exchange.


By Kama


