Download Fortinet.FortiDDoS.PracticeTest.2019-04-28.5q.tqb
| Vendor: | Fortinet |
| Exam Code: | FortiDDoS |
| Exam Name: | FortiDDoS 4.0 Specialist |
| Date: | Apr 28, 2019 |
| File Size: | 441 KB |
Demo Questions
Question 1
A FortiDDoS device is connected between a protected server and an Internet router. For the aggressive aging feature, the administrator must manually add the
router internal interface MAC address to the FortiDDoS configuration. Why does the FortiDDoS need this information?
- To send RST packets to the protected server spoofing the router internal interface MAC address.
- To allow incoming traffic only from that specific MAC address.
- To determine which traffic direction is incoming and which traffic direction is outgoing.
- To allow outgoing traffic only to that specific MAC address.
Correct answer: A
Explanation:
Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 80 Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 80
Question 2
As the exhibit shows, a FortiDDoS port2 is connected to the protected server. Its port1 is connected to the Internet. The FortiDDoS has 8 interfaces for user traffic.
The exhibit also shows a screenshot of the unit dashboard.
The administrator noticed that the statistics are showing all the traffic coming from the Internet to the protected server as outbound, instead of inbound. Based on the exhibit, what is the cause of this mislabeling?
- The protected server is connected to a wrong FortiDDoS interface. It must be connected to an interface from port 5 to port 8.
- SPP 0 is operating in detection mode.
- The SPP 0 link is down.
- FortiDDoS interfaces are wrongly connected. The interface port1 must be connected to the protected server and port2 must be connected to the Internet.
Correct answer: D
Question 3
A FortiDDoS device must be deployed as soon as possible in a customer network that is currently under a DDoS attack. Which values are recommended to use for the configured minimum thresholds?
- The factory default values.
- The factory default values increased by a percentage that depends on the customer traffic volume.
- The easy setup values.
- The system recommended values after a one-hour learning period.
Correct answer: D
Explanation:
Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 126 Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 126
