Explain DDoS Prevention and Mitigation Methods NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of allowlisting in DDoS mitigation?

   • ATo limit the rate of traffic from each source
   • BTo deny traffic from known malicious sources
   • CTo permit only traffic from a predefined list of trusted sources
   • DTo detect anomalies in traffic patterns
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does out-of-path mitigation typically divert traffic to a scrubbing center?

   • ABy placing a security device inline in the network path
   • BBy using DNS to resolve all domain names to a blackhole address
   • CBy blocking all traffic from the internet
   • DBy using BGP routing to redirect traffic to the scrubbing center
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A financial institution requires sub-second response to attacks but cannot afford any downtime during the transition to mitigation. They are considering both inline and out-of-path architectures. Which factor is most critical in their decision?

   • AOut-of-path mitigation is always faster because it uses BGP
   • BOut-of-path mitigation provides faster response because it does not process normal traffic
   • CInline mitigation provides faster response but introduces a single point of failure
   • DInline mitigation is always more reliable than out-of-path
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a primary limitation of signature-based detection in DDoS mitigation?

   • AIt cannot detect previously unseen or mutated attack patterns
   • BIt cannot detect attacks that match known signatures
   • CIt requires a baseline of normal traffic to function
   • DIt is only effective against volumetric attacks
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   A SYN flood attack, which exploits the TCP three-way handshake to exhaust a server's connection table, is best classified as which type of DDoS attack?

   • AAmplification attack
   • BApplication-layer attack
   • CVolumetric attack
   • DProtocol attack
   Reveal Solution Discussion Select an answer first