Establish Network Traffic Baselines NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A media streaming service uses FortiDDoS to protect its content delivery network. The service experiences a diurnal pattern with peaks in the evening. The administrator notices that the current threshold is set to a flat 10 Gbps, which causes false positives during the evening peak. What is the most effective way to reduce false positives while maintaining detection sensitivity?

   • ADecrease the flat threshold to 8 Gbps to catch more anomalies
   • BConfigure the threshold to adjust dynamically based on the time of day using the baseline
   • CDisable the threshold and rely on manual monitoring during the evening peak
   • DIncrease the flat threshold to 15 Gbps to accommodate the peak
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company is preparing for a major online event that will cause a significant traffic spike. The security team wants to ensure that FortiDDoS does not generate false positives during the event, but they also want to maintain detection capability for a potential DDoS attack that could occur during the event. What is the best approach?

   • AKeep thresholds at normal levels and accept the false positives
   • BIncrease all thresholds to the expected peak traffic for the event
   • CTemporarily adjust thresholds to the expected peak and then revert to normal after the event
   • DDisable thresholds during the event and re-enable them after
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which baseline learning mode requires the administrator to manually trigger the collection of traffic data to establish a new baseline?

   • AAdaptive mode
   • BManual mode
   • CScheduled mode
   • DAutomatic mode
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A retail company's website experiences a predictable surge in traffic every Black Friday. The security team wants to ensure that FortiDDoS does not flag this surge as an anomaly, while still detecting unusual spikes on other days. Which baseline learning approach should they use?

   • AUse automatic mode so the baseline continuously adapts to the Black Friday surge
   • BDisable baseline learning entirely and set static thresholds high enough to avoid alerts on Black Friday
   • CUse scheduled mode to learn baselines during normal business days and manually adjust thresholds for Black Friday
   • DUse manual mode to capture a baseline only during Black Friday
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the goal of tuning detection thresholds based on baseline data?

   • ATo ensure all traffic is blocked
   • BTo maximize the number of alerts generated
   • CTo eliminate the need for manual review
   • DTo minimize false positives and false negatives
   Reveal Solution Discussion Select an answer first