Implement Bot Mitigation NSE5-FORTIWEB-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–14

1. 11application · medium

   A social media platform is experiencing a bot attack that creates fake accounts and posts spam. The bots use different IP addresses and user-agents, making signature-based detection ineffective. The administrator wants to implement a solution that can adapt to new bot patterns. Which detection technique should be used?

   • ABehavioral analysis to identify patterns such as rapid account creation and repetitive posting.
   • BRate limiting on registration and posting endpoints.
   • CSignature-based detection with updated bot signatures.
   • DCAPTCHA challenges on registration and posting forms.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which mitigation action is specifically designed to lure a bot into interacting with a fake resource, allowing the administrator to study the bot's behavior without affecting real users?

   • ACAPTCHA challenge
   • BRedirecting to a honeypot
   • CRate limiting
   • DBlocking
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A company's website has a bot that is submitting forms with fake data, causing database pollution. The bot is using a known user-agent and a fixed IP range. The administrator wants to stop the bot while allowing legitimate form submissions. Which action should be taken?

   • ABlock the bot's user-agent and IP range using signature-based detection.
   • BImplement rate limiting on the form submission endpoint.
   • CRedirect the bot to a honeypot for analysis.
   • DEnable CAPTCHA on the form submission page.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A retail company's website is being flooded with login attempts from a botnet. The security team wants to block the attacks without affecting legitimate users. They have already identified the botnet's IP ranges and user-agent strings. Which mitigation action should the administrator configure on FortiWeb to immediately stop the attack while minimizing impact on legitimate traffic?

   • ARedirect all traffic from the identified IP ranges to a honeypot to isolate the botnet.
   • BCreate a signature-based bot detection rule that blocks the identified IP ranges and user-agent strings.
   • CConfigure a CAPTCHA challenge for all login attempts to filter out automated traffic.
   • DEnable behavioral analysis to detect the botnet's abnormal login patterns and automatically block them.
   Reveal Solution Discussion Select an answer first