Question 1

How should a FortiWeb administrator configure behavior-based bot detection to identify traffic from nonhuman users?

Options :

A : Set request rate limits and enable mouse movement tracking.

B : Block all traffic that doesnâ€™t come from known devices.

C : Disable JavaScript execution for anonymous users.

D : Create IP blocklists based on login failures.

Answer: A

Question 2

While reviewing FortiWeb logs, you notice a suspicious login request that failed authentication. You suspect it may be part of an injection attack targeting the login form. Which input pattern is an example of a typical SQL injection attempt that could bypass authentication checks?

Options :

A : '||(SELECT password FROM users WHERE role='admin')||'

B :

C :

D : SELECT username FROM accounts WHERE username='admin';-- ' AND password='password';

Answer: D

Question 3

Refer to the exhibits.You are configuring a FortiWeb device in reverse proxy mode, placed downstream from a FortiGate. The server pool includes two back-end web servers: 10.1.1.21 and 10.1.1.22, and youâ€™ve defined a health check policy. After completing the server policy configuration and applying it to a virtual server, you notice that FortiWeb is not forwarding traffic to the back-end servers. No errors or health check failures appear in the logs. Based on the configuration shown in the exhibit, which change should you make to restore back-end traffic flow?

Options :

A : Select the correct server pool in the FortiWeb server policy.

B : Enable Client Real IP to ensure traffic goes to the back-end servers.

C : Change the virtual server IP address to match one of the back-end servers.

D : Configure FortiGate to forward traffic to the back-end IP addresses directly.

Answer: A