Explain DDoS Prevention and Mitigation Methods NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is a key characteristic of anomaly detection in DDoS mitigation?

   • AIt can detect previously unseen attack patterns by identifying deviations from normal traffic
   • BIt only works for application-layer attacks, not volumetric or protocol attacks
   • CIt requires a signature to be created for every new attack before it can be detected
   • DIt relies on a constantly updated list of known malicious IP addresses
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A cloud provider's security team is evaluating mitigation strategies. They have a customer whose traffic is highly variable but not malicious, and another customer who is frequently targeted by low-and-slow application-layer attacks. The team needs a single strategy that will not impact the first customer's variable traffic but will detect the second customer's attacks. Which approach is most appropriate?

   • AApply a single static rate limit to all customers
   • BDeploy signature-based detection for all customers
   • CDeploy anomaly detection with per-customer baselines and dynamic rate limiting
   • DUse a global blocklist for all known attack sources
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A network administrator notices that traffic to a specific application has increased by 300% over the past hour, but the increase is gradual and consistent. The administrator is unsure if this is an attack or a legitimate trend. Which technique is most appropriate to determine this?

   • AUse anomaly detection to compare current traffic to the established baseline
   • BUse signature-based detection to identify the traffic
   • CBlocklist the application's source IPs
   • DApply a static rate limit to the application
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   In which scenario is allowlisting most appropriate for DDoS mitigation?

   • AA public website that needs to accept traffic from any user on the internet
   • BA network that needs to block traffic from a specific botnet
   • CA private application accessed only by a known set of employees or partners
   • DA service that experiences high traffic from many different IP addresses
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A large enterprise wants to mitigate volumetric DDoS attacks without adding latency to its normal data-center traffic. The enterprise has a high-capacity upstream provider that can absorb large floods. Which approach is most suitable?

   • ADeploy an inline mitigation device at the data-center edge
   • BApply static rate limits on all inbound traffic
   • CUse out-of-path mitigation with BGP redirect to the upstream provider's scrubbing center during attacks
   • DUse signature-based detection to block volumetric attacks
   Reveal Solution Discussion Select an answer first