Implement Global Protection Settings NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 3)

Questions 11–15

1. 11foundation · medium

   Why is it necessary to define proxy IP addresses on FortiDDoS when protecting clients that access the internet through a forward proxy?

   • ATo assign a static IP to the proxy server
   • BTo ensure that traffic from the proxy is correctly attributed to the original client IP
   • CTo allow the proxy to bypass all security checks
   • DTo block all traffic from the proxy
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A service provider uses FortiDDoS to protect multiple customers. They want to enable cloud signaling to receive threat intelligence from FortiGuard, but they are concerned that the global thresholds might be automatically adjusted by the cloud service, potentially causing false positives for some customers. What is the correct approach?

   • AEnable cloud signaling but disable automatic threshold adjustment from the cloud
   • BEnable cloud signaling and set global thresholds to the maximum value
   • CEnable cloud signaling and allow automatic threshold adjustment
   • DDisable cloud signaling and rely on manual threat intelligence updates
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A web application is fronted by a CDN that uses a fixed set of proxy IP addresses. The security team wants FortiDDoS to recognize the real client IP addresses from the X-Forwarded-For header so that rate-limiting and geo-blocking rules apply to actual clients. What should the administrator configure?

   • AConfigure a NAT policy to translate the CDN IPs to the client IPs
   • BAdd the CDN IP addresses to the proxy IP list
   • CEnable the 'trust all IPs' option in the network settings
   • DSet the interface role to 'proxy' on the incoming interface
   Reveal Solution Discussion Select an answer first
5. 14foundation · medium

   What is the primary benefit of enabling cloud signaling on a FortiDDoS device?

   • AIt provides a backup internet connection for the protected network
   • BIt automatically patches the FortiDDoS firmware
   • CIt allows the device to share threat intelligence and coordinate mitigation actions with cloud-based services like FortiGuard
   • DIt replaces the need for local traffic inspection
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is deploying FortiDDoS in a data center with multiple VLANs. The administrator wants to ensure that traffic from each VLAN is inspected independently, and that a DDoS attack on one VLAN does not affect the protection of other VLANs. What should be configured?

   • AUse router mode with static routes for each VLAN
   • BConfigure VLAN sub-interfaces and assign each to a separate protection profile
   • CEnable bypass mode for all VLANs
   • DConfigure all VLANs on a single interface with a single protection profile
   Reveal Solution Discussion Select an answer first