Explain DDoS Prevention and Mitigation Methods NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   What is the primary purpose of blocklisting in DDoS prevention?

   • ATo limit the rate of traffic from each source
   • BTo detect anomalies in traffic patterns
   • CTo deny traffic from known malicious IP addresses or sources
   • DTo allow only traffic from trusted sources
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   What is a key difference between blocklisting and allowlisting?

   • ABlocklisting requires a baseline of normal traffic, while allowlisting does not
   • BBlocklisting is used for application-layer attacks, while allowlisting is used for network-layer attacks
   • CBlocklisting permits all traffic except known malicious sources, while allowlisting blocks all traffic except known trusted sources
   • DBlocklisting is more effective against unknown attacks, while allowlisting is more effective against known attacks
   Reveal Solution Discussion Select an answer first
3. 33application · medium

   A gaming company's login server is being overwhelmed by a flood of connection attempts. The company wants to limit the number of new connections per second per source IP while still allowing established sessions to continue. Which configuration best achieves this?

   • AEnable anomaly detection to block all traffic during peak hours
   • BApply a static rate limit to all inbound and outbound traffic
   • CSet a rate limit on new connection attempts per source IP
   • DBlocklist all source IPs that exceed a single connection attempt
   Reveal Solution Discussion Select an answer first