Get real NSE5_FWB_AD-8.0 exam questions for better preparation

Which statement correctly differentiates FortiWeb's "signature-based detection" from "machine learning-based detection"?

• A. Signature-based detection matches traffic against known attack patterns, while machine learning detects anomalies by comparing traffic to a learned baseline of normal behavior.
• B. Machine learning only works in offline protection mode, while signatures only work in reverse proxy mode.
• C. Signature-based detection is exclusively used for SSL, while machine learning is exclusively used for HTTP.
• D. Signature-based detection requires no updates, while machine learning must be updated daily via FortiGuard.

Drag and Drop Question
Refer to the exhibit.

You are a FortiWeb administrator reviewing how FortiAI protects sensitive data when interacting with a large language model (LLM).
Drag each label to the corresponding step in the FortiAI data privacy workflow.
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the six correct steps in order, placing the first step in the position which is labeled as step 1.
Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop six steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.

Which statement best describes the difference between SAML authentication and HTML authentication in FortiWeb site publishing?

• A. SAML authentication uses a passwordless login, while HTML authentication uses tokens.
• B. SAML authentication is used for internal apps while HTML authentication is used for cloud apps.
• C. SAML authentication delegates login to an external system, while HTML authenticates directly on FortiWeb.
• D. SAML authentication encrypts passwords while HTML authentication sends passwords in cleartext format.

Which feature allows FortiWeb to inspect and enforce policy on API traffic that uses JSON or XML payloads, including schema validation?

• A. WCCP mode
• B. API protection / API gateway features
• C. Cookie poisoning detection
• D. Web anti-defacement

Drag and Drop Question
You are hosting multiple secure web applications behind a single public IP address on FortiWeb.
When a client connects to a service, FortiWeb needs to:
1 Identify the correct SSL certificate.
2 Decrypt the request.
3 Route the request to the correct back-end server.
Match each FortiWeb function to the request handling step that performs the function.
Select each FortiWeb function in the left column, hold and drag it to the blank space next to its corresponding request handling process in the column on the right. Once you match a FortiWeb function to its request handling process, you can move it again if you want to change your answer by clicking on the FortiWeb function. You need to match five FortiWeb functions to their request handling process in the work area.