Which implementation is most suited for a deployment that must meet PCI DSS compliance criteria?

1. A. SSL offloading with FortiWeb in reverse proxy mode
2. B. SSL offloading with FortiWeb in PCI DSS mode
3. C. SSL offloading with FortiWeb in transparency mode
4. D. SSL offloading with FortiWeb in full transparent proxy mode

Correct Answer: B

Which three stages are part of creating a machine learning (ML) bot detection algorithm? (Choose three.)

1. A. Model building
2. B. Model running
3. C. Model verification
4. D. Sample collecting
5. E. Model Bayesian analysis

Correct Answer: ACD

In SAML deployments, which server contains user authentication credentials (username/password)?

1. A. Identity provider
2. B. Service provider
3. C. User database
4. D. Authentication client

Correct Answer: A

In which two operating modes can FortiWeb modify HTTP packets? (Choose two.)

1. A. True transparent proxy
2. B. Virtual proxy
3. C. Transparent inspection
4. D. Reverse proxy

Correct Answer: BD

Refer to the exhibit.

FortiADC is applying SNAT to all inbound traffic going to the servers.
When an attack occurs, FortiWeb blocks traffic based on the192.0.2.1source IP address, which belongs to FortiADC. This setup is breaking all connectivity and genuine clients are not able to access the servers.
What can the administrator do to avoid this problem? (Choose two.)

1. A. Enable and configure the Preserve Client IP setting on the client.
2. B. No special configuration is required; connectivity will be re-established for all clients after the set timeout.
3. C. Place FortiWeb in front of FortiADC.
4. D. Enable and configure the Use X-Forwarded-For setting on FortiWeb.

Correct Answer: CD