Explain DDoS Prevention and Mitigation Methods NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   How does signature-based detection identify DDoS attacks?

   • ABy blocking all traffic from known malicious IP addresses
   • BBy comparing traffic to a baseline of normal behavior
   • CBy matching traffic patterns against known attack signatures
   • DBy limiting the rate of traffic from each source
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   What is the primary purpose of rate limiting in DDoS mitigation?

   • ATo block all traffic from known malicious IP addresses
   • BTo analyze traffic patterns and detect deviations from normal behavior
   • CTo allow only traffic from a predefined list of trusted sources
   • DTo restrict the number of requests a source can make within a given time period
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A media company is under a DNS amplification attack from a list of known open resolvers. The company wants to block these specific sources while continuing to serve legitimate DNS queries. Which technique is most appropriate?

   • AAllowlist only the company's internal DNS servers
   • BBlocklist the known open resolver IPs
   • CApply a static rate limit to all DNS queries
   • DUse anomaly detection to block all UDP traffic
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A hosting provider is seeing a recurring attack that uses a specific malformed HTTP request pattern. The provider wants to block this exact pattern without affecting other HTTP traffic. Which mitigation technique is most appropriate?

   • AApply a global rate limit to all HTTP requests
   • BBlocklist the entire /8 subnet of the attack source
   • CDeploy a signature that matches the malformed HTTP request pattern
   • DEnable anomaly detection to learn the malformed pattern over time
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a key architectural difference between inline and out-of-path mitigation?

   • AInline mitigation places the device in the direct traffic path, while out-of-path diverts traffic to a scrubbing center
   • BInline mitigation requires a scrubbing center, while out-of-path does not
   • CInline mitigation is always cloud-based, while out-of-path is always on-premises
   • DInline mitigation uses BGP to redirect traffic, while out-of-path does not
   Reveal Solution Discussion Select an answer first