Explain DDoS Prevention and Mitigation Methods NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A private research network only allows traffic from a small set of known partner organizations. The network has been targeted by application-layer attacks. Which mitigation approach is most effective for this environment?

   • ADeploy signature-based detection to block all application-layer attacks
   • BUse a blocklist to deny traffic from the attack source IPs
   • CConfigure an allowlist that only permits traffic from the known partner IP ranges
   • DApply a high rate limit to all inbound traffic
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A small business wants to protect its website from DDoS attacks but has limited budget and IT staff. They need a solution that is easy to manage and does not require changes to their existing network architecture. Which mitigation approach is most appropriate?

   • AConfigure static rate limits on the existing firewall
   • BDeploy an on-premises inline mitigation device
   • CUse signature-based detection on the existing firewall
   • DUse a cloud-based out-of-path scrubbing service
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In the context of DDoS mitigation, what is a common limitation of blocklisting?

   • AIt requires a baseline of normal traffic to function
   • BIt may block legitimate users who share an IP address with a malicious source
   • CIt cannot be used for application-layer attacks
   • DIt cannot be updated quickly enough to respond to new attacks
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An online retailer has a predictable traffic pattern, with a known spike every Black Friday. The security team wants to detect anomalies that deviate from this expected pattern. Which technique is most appropriate?

   • AApply a static rate limit that matches the Black Friday spike
   • BUse a blocklist to deny all traffic during Black Friday
   • CDeploy anomaly detection that learns the normal traffic baseline, including seasonal spikes
   • DDeploy signature-based detection to identify Black Friday traffic
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In the context of DDoS mitigation, what does a rate limiting policy typically define?

   • AA list of trusted IP addresses that are allowed to access the network
   • BA set of signatures that match known attack patterns
   • CA threshold for the maximum number of packets or requests allowed per second
   • DA list of IP addresses to block permanently
   Reveal Solution Discussion Select an answer first