Implement DDoS Protection in Different Network Topologies NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A financial institution is deploying FortiDDoS in an HA pair in active-active mode to protect its online banking platform. The network team is concerned about state synchronization between the two units, especially for UDP-based traffic. The team wants to ensure that if one unit fails, the other can continue to protect the platform without dropping legitimate sessions. Which consideration is most critical for this active-active deployment?

   • AConfiguring both units to use the same management IP address
   • BEnsuring that session state and learned baselines are synchronized between the two units
   • CDisabling UDP inspection to reduce synchronization overhead
   • DPlacing both units in different broadcast domains to avoid conflicts
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is a direct consequence of deploying FortiDDoS inline in a high-throughput network?

   • ASimplified failover
   • BEliminated need for monitoring
   • CReduced security
   • DIncreased latency
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A gaming company is deploying FortiDDoS inline to protect its online game servers. The network team is concerned about the impact of inline inspection on the game's latency-sensitive traffic. The company has a high-performance FortiDDoS appliance and wants to ensure that legitimate traffic is not dropped during peak load. Which configuration should the network team implement to minimize latency and avoid dropping legitimate traffic?

   • AEnable hardware acceleration and configure the appliance to use flow-based inspection with appropriate thresholds
   • BDeploy the appliance out-of-path using SPAN to avoid inline latency
   • CSet the appliance to fail-open mode and rely on upstream firewall for protection
   • DDisable all anomaly detection to reduce processing load
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In a FortiDDoS HA pair, what is the primary purpose of synchronization?

   • ATo provide a backup internet connection
   • BTo keep configuration and session state consistent between units
   • CTo enable load balancing of traffic
   • DTo double the processing capacity
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A data center operator is deploying FortiDDoS in an HA pair to protect a critical application. The operator wants to ensure that if the active unit fails, the standby unit takes over automatically, but the operator also wants to avoid any disruption to the application's traffic flow. The network team has configured the HA pair with a virtual IP and session synchronization. What else should the team configure to ensure seamless failover?

   • AConfigure both units to use the same management IP address
   • BDisable the HA heartbeat to avoid false failovers
   • CSet the failover threshold to the highest value to avoid any failover
   • DConfigure the HA heartbeat link and set the failover threshold appropriately
   Reveal Solution Discussion Select an answer first