Which of the following are methods BIG-IP ASM utilizes to mitigate web scraping vulnerabilities? (Choose 2)

BIG-IP ASM bot defense monitors mouse movement and keyboard event patterns because automated scrapers lack genuine human interaction behavior, allowing ASM to distinguish bots from real users.

Detecting excessive authentication failures is a brute force and credential stuffing protection mechanism, not a web scraping mitigation technique.

BIG-IP ASM injects JavaScript on the client side within the HTTP response to the browser, not on the server side - server-side injection is not a mechanism ASM uses for scraping detection.

ASM injects a JavaScript challenge into responses and verifies that the client browser can execute it and return a valid cookie, a test that most scraping tools and headless crawlers fail.