A FortiWeb administrator wants to stop coordinated scraping traffic coming from several IP addresses, each making only a few requests so thresholds never trigger.
Which tactic should the administrator deploy to identify botnets using shared behavioral signals instead of volume?

• A.A DoS protection profile with extremely low request limits for the entire site.
• B.A static blocklist for all IP addresses seen in logs, even if most appear only once.
• C.Bot mitigation with device fingerprinting to correlate clients by behavior, headers, and JavaScript challenges instead of IP address volume.
• D.A web application firewall (WAF) rule that blocks every user agent that is not on a manually created allowlist.

Comment: *

Name: *

Email: *

Verification: *

Which action must a FortiWeb administrator take to enable FortiAppSec Cloud Advanced Bot Protection (ABP) service in a cloud deployment?

• A.Deploy an internal intrusion detection system (IDS) to monitor incoming requests.
• B.Activate Advanced Bot Protection in FortiWeb and bind it to a FortiAppSec Cloud Application ID.
• C.Use browser fingerprinting to reject headless browsers.
• D.Set rate-limiting rules for every user session.

Comment: *

Name: *

Email: *

Verification: *

How should a FortiWeb administrator configure behavior-based bot detection to identify traffic from nonhuman users?

• A.Set request rate limits and enable mouse movement tracking.
• B.Block all traffic that doesn't come from known devices.
• C.Disable JavaScript execution for anonymous users.
• D.Create IP blocklists based on login failures.

Comment: *

Name: *

Email: *

Verification: *

FortiWeb is blocking groups of users behind your load balancer. In the logs, all users show the same source IP address. Which action should you take to restore proper client identification?

• A.Add a bot detection rule in the protection profile.
• B.Update the signature engine.
• C.Enable caching for HTTPS traffic.
• D.Reconfigure the load balancer to insert the original client IP address in an HTTP header.

Comment: *

Name: *

Email: *

Verification: *

Which log type would an administrator review first to investigate a specific blocked SQL injection attempt, including the matched signature and payload details?

• A.Traffic log
• B.Attack log
• C.Event log
• D.System log

Comment: *

Name: *

Email: *

Verification: *