Fortinet FortiDDoS 4.0 Specialist - FortiDDoS Exam Practice Test

Question 1

Which of the following events can make FortiDDoS drop packets? (Choose two.)

A. Packets match an access list with action deny. B. SPPs are working in detection mode. C. A violation of the TCP protocol in a TCP session. D. One direction of the traffic is crossing the FortiDDoS, but the other direction is not (asymmetric routing).

Correct Answer: C,D

Question 2

The exhibit shows the configuration for the blocking periods.

FortiDDoS has detected an incoming fragmented flood attack in SPP 0
According with the exhibit, which action does the unit take with the SPP-0 traffic as soon as the attack is detected?

A. All incoming packets from all sources are blocked for at least 15 seconds. B. Incoming fragmented packets from all sources are blocked for at least 60 seconds. C. Incoming fragmented packets from all sources are blocked for at least 15 seconds. D. Incoming fragmented packets from all identified malicious sources are blocked for at least 120 seconds.

Correct Answer: C