Implement Bot Mitigation NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A media streaming service is facing a bot attack that is creating fake accounts to access premium content. The bots are highly sophisticated, using real browser fingerprints and human-like behavior. The service wants to stop the attack without affecting legitimate users. The security team has a limited budget and cannot afford a third-party bot management service. Which approach should the administrator take?

   • AImplement behavioral analysis to detect patterns such as rapid account creation and unusual viewing habits.
   • BImplement rate limiting on the registration endpoint.
   • CUse signature-based detection to block known bot user-agents.
   • DEnable CAPTCHA challenges on the registration page.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A FortiWeb administrator detects a bot that is aggressively scraping product prices. The administrator wants to slow down the bot without completely blocking it, to allow legitimate users to continue accessing the site. Which mitigation action is most appropriate?

   • ARedirect to a honeypot
   • BCAPTCHA challenge
   • CRate limiting
   • DBlock the bot's IP address
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which bot detection technique involves presenting a JavaScript or CAPTCHA test to a client to verify it is a real browser rather than an automated script?

   • ABehavioral analysis
   • BChallenge-based methods
   • CSignature-based detection
   • DIP reputation analysis
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An online forum is experiencing a high volume of automated account creation. The administrator wants to reduce the number of fake accounts while allowing genuine users to register. Which FortiWeb configuration best addresses this requirement?

   • ASet a rate limit on the registration endpoint to allow only one request per minute per IP.
   • BBlock all traffic from IP addresses that have a high reputation score.
   • CEnable a CAPTCHA challenge on the registration form.
   • DRedirect registration requests to a honeypot for further analysis.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A large online retailer is facing a sophisticated bot attack that is scraping product prices and inventory. The bots use a mix of techniques: some use known bot signatures, while others mimic legitimate browsers and rotate IPs. The retailer wants to minimize false positives and avoid blocking legitimate customers. The security team has limited resources and needs a solution that can be implemented quickly. Which approach should the administrator take?

   • ARely solely on behavioral analysis to detect all bots.
   • BImplement a multi-layered approach: use signature-based detection for known bots, behavioral analysis for evasive bots, and rate limiting as a fallback.
   • CBlock all traffic from IP addresses with a high reputation score.
   • DEnable CAPTCHA challenges on all product pages.
   Reveal Solution Discussion Select an answer first