Why is it important to identify IPsec tunnel endpoint addresses in a FortiDDoS protection profile?

To block all traffic from the tunnel

To encrypt traffic to the tunnel endpoints

To allow all traffic from the tunnel without inspection

To ensure that traffic from the tunnel is correctly associated with the tunnel for anomaly detection

A company's FortiDDoS device protects a web server that hosts both a public website and a partner portal. The partner portal is accessed via a specific domain that is also used by a malicious campaign. The company must block the malicious campaign's traffic to the domain while ensuring the partner portal remains accessible. The partner portal uses a specific IP address that is different from the malicious campaign's IPs. What is the best approach?

Add the partner portal's IP to the IPsec tunnel endpoint list.

Add the malicious campaign's IP addresses to the blocklist.

Add the domain to the domain blocklist and create an ACL to permit traffic from the partner portal's IP address.

Create an ACL to deny all traffic to the domain's IP addresses.

What is the primary purpose of configuring an IPv4 blocklist in a FortiDDoS protection profile?

To prevent traffic from specified IPv4 source addresses from being processed

To redirect traffic from specified IPv4 addresses to a honeypot

To log all traffic from specified IPv4 addresses without taking action

To allow traffic from trusted sources to bypass anomaly detection

A gaming company is under attack from a botnet that uses DNS queries to a known malicious domain to coordinate the attack. The attack traffic originates from many different IPv4 addresses, making IP-based blocking impractical. The company wants to stop the attack at the FortiDDoS device. What should the administrator configure?

Add the malicious domain to the domain blocklist in the protection profile.

Create an ACL to deny all DNS traffic to the domain's IP address.

Add each botnet source IPv4 address to the IP blocklist.

Configure a rate threshold to block any source that sends more than 10 DNS queries per second.

What is the purpose of configuring GRE tunnel endpoint addresses in a FortiDDoS protection profile?

To allow all GRE traffic without inspection

To block all GRE traffic from the specified endpoints

To encrypt GRE tunneled traffic

To ensure GRE tunneled traffic is correctly identified for anomaly detection

FortinetNSE 6 - FortiDDoS Administrator

Domain 3Objective 3

Configure and Tune Protection Profiles for Anomaly Detection NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 1)

Part of the Protection and Mitigation Controls domain, which accounts for 25-35% of the NSE6-FORTIDDOS-ADMINISTRATOR exam.

12questions here

3free pages

5concepts

25-35%of the exam

Questions 1–5

1foundation · easy
Why is it important to identify IPsec tunnel endpoint addresses in a FortiDDoS protection profile?
Select an answer first
2expert · hard
A company's FortiDDoS device protects a web server that hosts both a public website and a partner portal. The partner portal is accessed via a specific domain that is also used by a malicious campaign. The company must block the malicious campaign's traffic to the domain while ensuring the partner portal remains accessible. The partner portal uses a specific IP address that is different from the malicious campaign's IPs. What is the best approach?
Select an answer first
3foundation · easy
What is the primary purpose of configuring an IPv4 blocklist in a FortiDDoS protection profile?
Select an answer first
4application · medium
A gaming company is under attack from a botnet that uses DNS queries to a known malicious domain to coordinate the attack. The attack traffic originates from many different IPv4 addresses, making IP-based blocking impractical. The company wants to stop the attack at the FortiDDoS device. What should the administrator configure?
Select an answer first
5foundation · easy
What is the purpose of configuring GRE tunnel endpoint addresses in a FortiDDoS protection profile?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTIDDOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTIDDOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.