Which output is a typical result of post-attack analysis?

A report summarizing the attack timeline and mitigation actions

A list of all configured thresholds

A firmware update recommendation

When correlating logs, graphs, and event lists to understand an attack, which sequence of actions is most effective?

Use only the graphs to determine the attack source

Start with the graphs to identify traffic spikes, then ignore logs and event lists

Start with the logs to find drop reasons, then ignore graphs and event lists

Start with the event list to identify attack times, then cross-reference with graphs and logs for details

A new administrator is learning to use the FortiDDoS dashboard. They need to quickly identify if there is an ongoing attack and what type of mitigation is being applied. Which dashboard widgets should they focus on?

The System Health widget and the Interface widget

The Attack Status widget and the Drops widget

The Top Talkers widget and the Traffic Graph widget

The Logs widget and the Reports widget

FortinetNSE 6 - FortiDDoS Administrator

Domain 4Objective 2

Analyze Logs, Reports, and Traffic Data NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 5)

Part of the Monitoring, Logging, and Analysis domain, which accounts for 10-20% of the NSE6-FORTIDDOS-ADMINISTRATOR exam.

26questions here

6free pages

7concepts

10-20%of the exam

Questions 21–25

21foundation · easy
Which output is a typical result of post-attack analysis?
Select an answer first
22foundation · easy
A FortiDDoS administrator notices drops that are triggered by matching known attack patterns. Which drop type is this?
Select an answer first
23foundation · easy
An administrator sees a traffic spike in a graph and wants to know which drop types were triggered during that spike. Which additional data source should they consult?
Select an answer first
24foundation · easy
When correlating logs, graphs, and event lists to understand an attack, which sequence of actions is most effective?
Select an answer first
25application · medium
A new administrator is learning to use the FortiDDoS dashboard. They need to quickly identify if there is an ongoing attack and what type of mitigation is being applied. Which dashboard widgets should they focus on?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTIDDOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTIDDOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.

Analyze Logs, Reports, and Traffic Data NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 5)

Questions 21–25

Which output is a typical result of post-attack analysis?

A FortiDDoS administrator notices drops that are triggered by matching known attack patterns. Which drop type is this?

An administrator sees a traffic spike in a graph and wants to know which drop types were triggered during that spike. Which additional data source should they consult?

When correlating logs, graphs, and event lists to understand an attack, which sequence of actions is most effective?

A new administrator is learning to use the FortiDDoS dashboard. They need to quickly identify if there is an ongoing attack and what type of mitigation is being applied. Which dashboard widgets should they focus on?

Keep studying — Monitoring, Logging, and Analysis