Fortinet FCP_FWB_AD-7.4 Exam - Topic 1 Question 17 Discussion

Actual exam question for Fortinet's FCP_FWB_AD-7.4 exam

Question #: 17
Topic #: 1

[All FCP_FWB_AD-7.4 Questions]

An attacker attempts to send an SQL injection attack containing the known attack string 'root'; -- through an API call.

Which FortiWeb inspection feature will be able to detect this attack the quickest?

AAPI gateway rule

BKnown signatures

CMachine learning (ML)-based API protection---anomaly detection

DML-based API protection---threat detection

Show Suggested Answer

Suggested Answer: B

The quickest detection for an SQL injection attack like the one described ('root'; --) would be through known signatures. FortiWeb utilizes signature-based detection to match incoming traffic against predefined attack patterns. Since SQL injection attacks are commonly known and have specific patterns (such as 'root'; --), known signatures would immediately recognize and flag this type of attack.

by Zoila at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium FCP_FWB_AD-7.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valentine

3 days ago

Haha, "root'; --" ? Sounds like someone's been watching too many hacking movies.

upvoted 0 times

...

Stephanie

8 days ago

C) ML-based API protection---anomaly detection sounds fancy, but I'm a simple man. Give me the good old signatures any day.

upvoted 0 times

...

Christa

13 days ago

B) Known signatures is the way to go. Gotta love those tried and true methods!

upvoted 0 times

...

Elsa

18 days ago

From practice questions, I recall that ML-based detection is more about identifying anomalies rather than known threats, so I would lean towards known signatures for this one.

upvoted 0 times

...

Carrol

24 days ago

I feel like the API gateway rule might also be relevant, but I can't recall if it specifically targets SQL injection attacks.

upvoted 0 times

...

Alecia

29 days ago

I think the known signatures would be the best choice here since they are designed to detect known attack patterns like SQL injections.

upvoted 0 times

...

An

1 month ago

I remember studying the different inspection features, but I'm not entirely sure which one would be the quickest for this specific attack.

upvoted 0 times

...

Nichelle

1 month ago

Hmm, I'm a little confused. I know FortiWeb has a lot of security features, but I'm not sure which one would be the quickest for this specific scenario. I'll need to re-read the question and options carefully.

upvoted 0 times

...

Kiera

1 month ago

I'm pretty confident the 'API gateway rule' would be able to catch this SQL injection attack. That feature is designed to inspect API traffic and block known attack patterns, right?

upvoted 0 times

...

German

2 months ago

I'm a bit unsure about the differences between the ML-based options. Do the 'anomaly detection' and 'threat detection' features work differently? I'll need to review those in more detail.

upvoted 0 times

...

Kate

2 months ago

Okay, let me think this through. The attack string is known, so the 'Known signatures' option seems like it could work. But the question is asking about the quickest detection, so maybe the ML-based anomaly detection would be faster?

upvoted 0 times

...

Tesha

2 months ago

Hmm, this looks like it's testing our knowledge of FortiWeb's security features. I think the key is to identify the feature that would be most effective at detecting that specific SQL injection attack.

upvoted 0 times

...