A FortiDDoS device is deployed in a data center with a 40 Gbps link. The administrator has configured global thresholds based on the previous 10 Gbps link. After the upgrade, the device is dropping legitimate traffic during peak hours. What is the most likely cause?

The global thresholds are still set for the old 10 Gbps link and need to be scaled up

The proxy IP list is incomplete

The device is not in bypass mode

A FortiDDoS device is deployed in a high-bandwidth environment. The administrator wants to ensure that global thresholds scale appropriately with the link capacity to avoid false positives during normal traffic spikes. What should be done?

Enable auto-scaling of global thresholds based on link utilization

Set global thresholds to the maximum value

Disable global thresholds and rely on per-IP thresholds

Manually adjust thresholds weekly

A FortiDDoS device is deployed in a data center with a 10 Gbps link. The administrator notices that the global threshold for SYN packets is set to a value that seems too low for the traffic volume. What is the correct way to adjust the global threshold to avoid false positives?

Manually increase the SYN threshold to a value above the peak legitimate traffic

Disable the SYN threshold to prevent false positives

Enable auto-learning mode to let the device adjust thresholds based on observed traffic

Set the threshold to the default value

A FortiDDoS device is placed between a router and a firewall. The administrator wants to ensure that traffic from the router to the firewall is inspected, but traffic from the firewall back to the router is not inspected because it is considered trusted. What should be configured?

Configure a policy to allow traffic from the firewall to the router

Set both interfaces as 'untrusted'

Set both interfaces as 'trusted'

Set the interface connected to the router as 'untrusted' and the interface connected to the firewall as 'trusted'

FortinetNSE 6 - FortiDDoS Administrator

Domain 3Objective 1

Implement Global Protection Settings NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 2)

Part of the Protection and Mitigation Controls domain, which accounts for 25-35% of the NSE6-FORTIDDOS-ADMINISTRATOR exam.

25questions here

5free pages

4concepts

25-35%of the exam

Questions 6–10

6expert · hard
A FortiDDoS device is deployed in a data center with a 40 Gbps link. The administrator has configured global thresholds based on the previous 10 Gbps link. After the upgrade, the device is dropping legitimate traffic during peak hours. What is the most likely cause?
Select an answer first
7application · medium
A FortiDDoS device is deployed in a high-bandwidth environment. The administrator wants to ensure that global thresholds scale appropriately with the link capacity to avoid false positives during normal traffic spikes. What should be done?
Select an answer first
8application · medium
A FortiDDoS device is deployed in a data center with a 10 Gbps link. The administrator notices that the global threshold for SYN packets is set to a value that seems too low for the traffic volume. What is the correct way to adjust the global threshold to avoid false positives?
Select an answer first
9foundation · medium
Which operational mode allows FortiDDoS to be deployed inline, actively dropping malicious traffic, rather than passively monitoring a copy of the traffic?
Select an answer first
10application · medium
A FortiDDoS device is placed between a router and a firewall. The administrator wants to ensure that traffic from the router to the firewall is inspected, but traffic from the firewall back to the router is not inspected because it is considered trusted. What should be configured?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to NSE6-FORTIDDOS-ADMINISTRATOR

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Fortinet. “NSE6-FORTIDDOS-ADMINISTRATOR” is a trademark of its owner, used for identification only.