Implement Global Protection Settings NSE6-FORTIDDOS-ADMINISTRATOR Practice Questions (Page 4)

Questions 16–20

1. 16foundation · medium

   In a FortiDDoS deployment, which interface role is used to connect the device to the protected network segment so that it can inspect traffic destined to the servers?

   • AProtected interface
   • BHA sync interface
   • CManagement interface
   • DUnprotected interface
   Reveal Solution Discussion Select an answer first
2. 17foundation · medium

   How do global thresholds on FortiDDoS typically behave when traffic levels increase across the device?

   • AThey scale dynamically based on observed traffic patterns
   • BThey are manually adjusted by the administrator only
   • CThey remain fixed and do not change
   • DThey are disabled when traffic exceeds a certain level
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company has a web application that uses a CDN. The CDN occasionally changes its IP addresses. The security team wants FortiDDoS to always recognize the CDN as a proxy, even when the IP changes. What is the best practice?

   • AManually update the proxy IP list whenever the CDN IP changes
   • BUse a dynamic proxy IP list that is updated via cloud signaling
   • CDisable proxy IP recognition and rely on the CDN's source IP
   • DAdd the CDN's domain name to the proxy IP list
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   An organization is deploying FortiDDoS in a transparent mode with bypass enabled. They also want to enable cloud signaling for threat intelligence. However, they are concerned that if the device fails and bypass is active, the cloud signaling connection will be lost, and they will not receive threat intelligence. What is the best solution?

   • ADeploy a second FortiDDoS unit in high-availability mode to maintain cloud signaling during a failure
   • BAccept the loss of cloud signaling during failure
   • CConfigure cloud signaling to use a secondary interface
   • DDisable bypass mode to ensure the device remains in the path
   Reveal Solution Discussion Select an answer first
6. 20foundation · medium

   What is the primary purpose of configuring a proxy IP address list on FortiDDoS?

   • ATo enable the device to act as a proxy itself
   • BTo increase the maximum number of concurrent connections
   • CTo block all traffic from unknown IP addresses
   • DTo allow FortiDDoS to identify traffic that has been forwarded by a proxy and apply correct source IP handling
   Reveal Solution Discussion Select an answer first