Pass with NSE5_FWB_AD-8.0 Practice Materials 100% for sure

Drag and Drop Question
Refer to the exhibit.

You are a FortiWeb administrator reviewing how FortiAI protects sensitive data when interacting with a large language model (LLM).
Drag each label to the corresponding step in the FortiAI data privacy workflow.
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the six correct steps in order, placing the first step in the position which is labeled as step 1.
Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop six steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.

Refer to the exhibit.

You are deploying FortiWeb to handle HTTPS traffic from clients and forward cleartext traffic to a back-end server.
You want FortiWeb to decrypt the HTTPS session, inspect the traffic, and then send the traffic to the server using HTTP.
What can you configure on FortiWeb to make this behavior happen?

• A. Configure FortiWeb to reuse the same certificate for inbound and outbound HTTPS traffic without decrypting traffic.
• B. Configure passive SSL inspection so FortiWeb analyzes encrypted packets without terminating SSL.
• C. Enable reencryption on the back-end interface so the server receives HTTPS traffic.
• D. Enable SSL offloading so FortiWeb terminates the client's HTTPS session and forwards decrypted HTTP traffic to the back-end server.

Which action must a FortiWeb administrator take to enable FortiAppSec Cloud Advanced Bot Protection (ABP) service in a cloud deployment?

• A. Use browser fingerprinting to reject headless browsers.
• B. Activate Advanced Bot Protection in FortiWeb and bind it to a FortiAppSec Cloud Application ID.
• C. Deploy an internal intrusion detection system (IDS) to monitor incoming requests.
• D. Set rate-limiting rules for every user session.

You are reviewing SSL-related issues on FortiWeb. An administrator reports that they receive a certificate warning when they access the FortiWeb GUI over HTTPS. Separately, your FortiWeb device also makes outbound HTTPS requests to a back-end API server. In which two situations would FortiWeb use its own certificates to establish or secure the connection? (Choose two.)

• A. When FortiWeb is routing an HTTPS connection to a FortiGate without decrypting it.
• B. When a client browser initiates an SSL session and FortiWeb is in transparent inspection mode.
• C. When FortiWeb connects to a back-end server over HTTPS as a client.
• D. When an administrator connects to the FortiWeb GUI using HTTPS in a browser.

Your e-commerce platform is experiencing frequent SQL injection attempts. You need FortiWeb to actively inspect, enforce, and block attacks inline before traffic reaches the web servers.
The deployment must support the full FortiWeb security feature set without operational limitations, including protocol validation, attack detection, and policy enforcement.
Which FortiWeb operation mode should you configure to proactively intercept and block threats such as SQL injection attempts?

• A. Transparent bridge mode
• B. Offline protection
• C. Reverse proxy
• D. Web Cache Communication Protocol (WCCP) integration mode