Which statement correctly differentiates FortiWeb's "signature-based detection" from "machine learning-based detection"?

• A. Signature-based detection matches traffic against known attack patterns, while machine learning detects anomalies by comparing traffic to a learned baseline of normal behavior.
• B. Machine learning only works in offline protection mode, while signatures only work in reverse proxy mode.
• C. Signature-based detection requires no updates, while machine learning must be updated daily via FortiGuard.
• D. Signature-based detection is exclusively used for SSL, while machine learning is exclusively used for HTTP.

Refer to the exhibit.

What is does the exhibit show?

• A. The result of a show ui details command on a FortiWeb server.
• B. The FortiGate UI interface in HTML.
• C. A sample response returned by the FortiGate API at https://fortigate.com/ui.
• D. An API schema file.

Refer to the exhibit.

A FortiWeb administrator notices an alert triggered under the Threshold Based Detection category, with the message: Threshold Based Content Scraping Detection (Bot Detection) violation.
Based on the log details, what is the most likely cause of this alert?

• A. A vulnerability scanner triggering rate limits by simulating browser behavior
• B. A client sending malformed HTTP requests due to browser incompatibility
• C. An automated script or bot systematically accessing multiple pages to extract web content
• D. A layer 4 SYN flood attack overwhelming the web server

A FortiWeb administrator is hardening a customer checkout website.
The site contains sensitive links such as Login, Payment, and Admin, which are embedded in the HTML content of several pages.
A vulnerability scan shows that automated bots can crawl the web pages and easily enumerate these links by parsing the HTML source, even though users access them normally, through the site navigation.
Which FortiWeb feature should the administrator enable to prevent automated scanners from discovering these links?

• A. URL encryption
• B. URL rewriting
• C. Deep packet inspection
• D. Link cloaking

Drag and Drop Question
A FortiWeb administrator is reviewing protection effectiveness after a surge in malicious traffic exposed design flaws and misconfigurations in several web applications.
For each Open Web Application Security Project (OWASP) risk listed, choose the FortiWeb feature that offers the most strategic protection, considering both coverage depth and operational effectiveness.
Match the most appropriate FortiWeb feature to each OWASP issue.
Select each FortiWeb feature in the left column, hold and drag it to the blank space next to the OWASP issue in the column on the right. Once you match a FortiWeb feature to the OWASP issue, you can move it again if you want to change your answer by clicking on the FortiWeb feature. You need to match five FortiWeb features to the OWASP issue in the work area.