Fortinet FortiDDoS Exam Questions in PDF and Online

QUESTION: 1

Which is true regarding packets that match a do-not-track policy with the action Track and Allow?

Packets are never dropped.
Source IP addresses are added to the legitimate IP (LIP) table.
Packets are not included in the statistics for threshold estimation.
Packets are assigned to SPP 0.

Answer(s): A

Reveal Solution Next Question

QUESTION: 2

Regarding the switching SPP feature, what is used to determine when FortiDDoS switches the traffic to an alternate SPP?

Traffic volume
Destination IP addresses
Mitigated attacks
Blocked packets

Answer(s): A

Reveal Solution Next Question

A FortiDDoS device is connected between a protected server and an Internet router. For the aggressive aging feature, the administrator must manually add the router internal interface MAC address to the FortiDDoS configuration.
Why does the FortiDDoS need this information?

To send RST packets to the protected server spoofing the router internal interface MAC address.
To allow incoming traffic only from that specific MAC address.
To determine which traffic direction is incoming and which traffic direction is outgoing.
To allow outgoing traffic only to that specific MAC address.

Answer(s): A

Reveal Solution Next Question

QUESTION: 4

As the exhibit shows, a FortiDDoS port2 is connected to the protected server. Its port1 is connected to the Internet. The FortiDDoS has 8 interfaces for user traffic. The exhibit also shows a screenshot of the unit dashboard.

The administrator noticed that the statistics are showing all the traffic coming from the Internet to the protected server as outbound, instead of inbound. Based on the exhibit, what is the cause of this mislabeling?

The protected server is connected to a wrong FortiDDoS interface. It must be connected to an interface from port 5 to port 8.
SPP 0 is operating in detection mode.
The SPP 0 link is down.
FortiDDoS interfaces are wrongly connected. The interface port1 must be connected to the protected server and port2 must be connected to the Internet.

Answer(s): D

Reveal Solution Next Question

QUESTION: 5

A FortiDDoS administrator wants the configured minimum threshold to act as a hard, fixed threshold. So, FortiDDoS will start dropping packets and mitigating the traffic as soon as the traffic volume goes above the configured minimum threshold, regardless of the values of the other thresholds.
What configuration change can be done to achieve this requirement?

Setting the SPP to detection mode.
Changing the adaptive mode to fixed.
Setting the adaptive limit percentage to 100%.
Disabling the adaptive limit threshold.

Answer(s): C

Reveal Solution Next Question

Fortinet FortiDDoS 4.0 Specialist FortiDDoS Exam Questions in PDF

Free Fortinet FortiDDoS Dumps Questions (page: 1)

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5