While reviewing FortiWeb logs, you notice a suspicious login request that failed authentication.
You suspect it may be part of an injection attack targeting the login form. Which input pattern is an example of a typical SQL injection attempt that could bypass authentication checks?

• A.<script>document.location='/steal?cookie='+document.cookie</script>
• B.SELECT username FROM accounts WHERE username='admin';-- ' AND password='password';
• C.'||(SELECT password FROM users WHERE role='admin')||'
• D.<sql>select(ALL USERS);</sql>

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

You are a FortiWeb administrator reviewing the biometrics-based detection rule shown in the exhibit.
Your goal is to configure a rule that detects bots that avoid typical human interactions like using a mouse or clicking. You also want to log the detection event and apply a high-severity alert.
Based on the current configuration, which settings should you change to meet this goal?

• A.Do not select any client events to monitor, enable Bot Trait Checking, keep the current severity, and keep the action as Deny (no log).
• B.Select Screen Touch and Page Focus, set the severity to Low, and keep action as Deny (no log).
• C.Select Mouse Movement and Click, change the action to Alert, and set the severity to High.
• D.Select Keyboard and Scroll, change the action to Alert, and set the severity to High.

Comment: *

Name: *

Email: *

Verification: *

Which two statements are true regarding FortiWeb operating in Offline Protection mode? (Choose two.)

• A.FortiWeb can block malicious traffic in real time.
• B.FortiWeb monitors a copy of traffic via a switch SPAN or mirror port.
• C.FortiWeb can reset the connection to interrupt an attack after detection.
• D.FortiWeb performs full SSL termination and decryption.

Comment: *

Name: *

Email: *

Verification: *

Drag and Drop Question
Refer to the exhibit.

You are a FortiWeb administrator reviewing how FortiAI protects sensitive data when interacting with a large language model (LLM).
Drag each label to the corresponding step in the FortiAI data privacy workflow.
Select the step in the left column, hold and drag it to a blank position in the column on the right.
Place the six correct steps in order, placing the first step in the position which is labeled as step 1.
Once you place a step, you can move it again if you want to change your answer before moving to the next question. You need to drop six steps in the work area.
Select and drag the screen divider to change the viewable area of the source and work areas.

Correct Answer:

Explanation:
1 → The administrator submits a natural-language query.
2 → FortiWeb masks sensitive data.
3 → FortiAI Proxy sends a masked query to the LLM.
4 → The LLM returns a function response.
5 → FortiWeb unmasks and runs the query locally.
6 → The result is shown to the administrator with original values.
FortiAI protects sensitive data by masking values before anything is sent to the LLM. The LLM works only with the masked prompt and returns a function-style response. FortiWeb then restores the original values locally, runs the query, and displays the final result to the administrator without exposing real sensitive data externally.

Comment: *

Name: *

Email: *

Verification: *

A web application requires that FortiWeb detect and block credential stuffing attempts where a botnet cycles through many username/password combinations. Which FortiWeb feature is best suited for this?

• A.URL rewriting
• B.Brute force login protection combined with bot mitigation
• C.HTTP protocol constraints
• D.Web cache

Comment: *

Name: *

Email: *

Verification: *