Establish Network Traffic Baselines NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A healthcare organization is required to maintain high availability for its patient portal. The portal experiences a consistent daily pattern: low traffic at night, a steady increase during the day, and a peak in the early evening. The administrator wants to configure FortiDDoS to detect anomalies that could indicate an attack, but must avoid false positives that could disrupt patient access. What is the best approach?

   • ASet a single static threshold based on the peak daily traffic
   • BSet a single static threshold based on the average daily traffic
   • CDisable thresholds and rely on manual monitoring during peak hours
   • DUse the baseline to set dynamic thresholds that adjust to the time of day
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the difference between peak and average traffic metrics in the context of baseline establishment?

   • APeak is used for baseline, while average is used for anomaly detection
   • BPeak represents the typical value, while average represents the highest observed value
   • CPeak is the median, while average is the mode
   • DPeak represents the highest observed value, while average represents the typical value over a period
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   An administrator wants the FortiDDoS device to automatically update its baseline during off-peak hours without any manual intervention. Which baseline learning mode should be configured?

   • AScheduled mode
   • BManual mode
   • CContinuous mode
   • DOn-demand mode
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial services company is deploying FortiDDoS in front of its production web application. The network experiences a predictable daily pattern: low traffic at night, a sharp increase during business hours, and occasional spikes caused by marketing campaigns. The security team wants to establish a baseline that reflects the normal business-hour behavior without being skewed by the marketing spikes. Which baseline learning mode should the administrator configure?

   • AScheduled mode, which runs baseline learning only during the marketing campaign periods
   • BScheduled mode, which runs baseline learning only during off-peak hours at night
   • CAutomatic mode, which continuously updates the baseline based on all observed traffic
   • DManual mode, where the administrator captures a baseline snapshot during a known normal business hour
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A government agency is deploying FortiDDoS to protect its public-facing website. The website experiences a predictable increase in traffic during tax season. The agency wants to establish a baseline that reflects normal traffic for the rest of the year, but they are concerned that the tax season traffic will skew the baseline. What is the best approach?

   • AUse automatic mode during tax season to capture the higher traffic
   • BUse manual mode to capture a baseline during a non-tax-season period
   • CUse automatic mode year-round and manually adjust thresholds after tax season
   • DUse scheduled mode to learn the baseline only during tax season
   Reveal Solution Discussion Select an answer first