nerdexam
Fortinet

FCP_FWB_AD-7.4 · Question #44

An attacker attempts to send an SQL injection attack containing the known attack string 'root'; -- through an API call. Which FortiWeb inspection feature will be able to detect this attack the…

The correct answer is B. Known signatures. The quickest detection for an SQL injection attack like the one described ('root'; --) would be through known signatures. FortiWeb utilizes signature-based detection to match incoming traffic against predefined attack patterns. Since SQL injection attacks are commonly known and…

Advanced Web Protection

Question

An attacker attempts to send an SQL injection attack containing the known attack string 'root'; -- through an API call. Which FortiWeb inspection feature will be able to detect this attack the quickest?

Options

  • AAPI gateway rule
  • BKnown signatures
  • CMachine learning (ML)-based API protection--anomaly detection
  • DML-based API protection--threat detection

How the community answered

(48 responses)
  • A
    8% (4)
  • B
    83% (40)
  • C
    2% (1)
  • D
    6% (3)

Explanation

The quickest detection for an SQL injection attack like the one described ('root'; --) would be through known signatures. FortiWeb utilizes signature-based detection to match incoming traffic against predefined attack patterns. Since SQL injection attacks are commonly known and have specific patterns (such as 'root'; --), known signatures would immediately recognize and flag this

Topics

#SQL injection#known signatures#API attack detection#signature-based detection

Community Discussion

No community discussion yet for this question.

Full FCP_FWB_AD-7.4 Practice