Configure Service Protection Policies and Traffic Enforcement NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 6)

Questions 26–26

1. 26application · medium

   A telecom provider is experiencing a SYN flood attack targeting its customer portal. The attack traffic is coming from a botnet with IPs spread across multiple countries. The administrator wants to block the attack while allowing legitimate customers to access the portal. What is the most effective enforcement action?

   • ADisable the SYN protection policy and rely on the firewall to handle the attack.
   • BIncrease the SYN threshold to allow the attack traffic to pass without triggering alarms.
   • CBlock all traffic from the countries where the botnet IPs are located.
   • DEnable SYN proxy on the service protection policy to validate handshakes before allowing connections.
   Reveal Solution Discussion Select an answer first