Configure Service Protection Policies and Traffic Enforcement NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   How are service protection profiles assigned to policies in FortiDDoS?

   • ABy importing the profile via a configuration backup
   • BBy placing the profile in the same VLAN as the policy
   • CBy selecting a profile when creating or editing a service protection policy
   • DBy enabling the profile in the global system settings
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary basis for determining appropriate threshold values in a service protection policy?

   • AThe firmware version of the FortiDDoS device
   • BThe number of administrators on the network
   • CBaseline traffic patterns and known attack characteristics
   • DThe physical location of the FortiDDoS device
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a false positive in the context of FortiDDoS protection?

   • ALegitimate traffic that is incorrectly identified as attack traffic
   • BA log entry with an error
   • CAttack traffic that is not detected
   • DA policy that is disabled
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the likely result of setting a threshold value too low in a service protection policy?

   • AIncreased false positives
   • BDecreased false positives
   • CNo impact on detection
   • DIncreased attack traffic
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A university runs a public DNS server and a separate web server. The FortiDDoS administrator needs to apply different protection settings for each service. The DNS server experiences frequent legitimate queries from recursive resolvers, while the web server has occasional spikes in HTTP traffic. What is the most efficient way to configure the FortiDDoS device?

   • ACreate two separate service protection policies: one for DNS and one for HTTP, each with its own thresholds and protection profiles.
   • BCreate one service protection policy for DNS and rely on the default policy for HTTP traffic.
   • CUse a single policy with DNS and HTTP enabled, but set the thresholds to the lowest common denominator to ensure both are protected.
   • DCreate a single service protection policy with both DNS and HTTP enabled, and set thresholds to accommodate the highest traffic of either service.
   Reveal Solution Discussion Select an answer first