Download FortiDDoS 4.0 Specialist.FortiDDoS.TestKing.2019-04-14.5q.vcex
| Vendor: | Fortinet |
| Exam Code: | FortiDDoS |
| Exam Name: | FortiDDoS 4.0 Specialist |
| Date: | Apr 14, 2019 |
| File Size: | 132 KB |
How to open VCEX files?
Files with VCEX extension can be opened by ProfExam Simulator.
Discount: 20%
Demo Questions
Question 1
Regarding the switching SPP feature, what is used to determine when FortiDDoS switches the traffic to an alternate SPP?
- Traffic volume
- Destination IP addresses
- Mitigated attacks
- Blocked packets
Correct answer: A
Explanation:
Reference: http://help.fortinet.com/fddos/4-3-0/FortiDDoS/Configuring_SPP_policy_settings.htm Reference: http://help.fortinet.com/fddos/4-3-0/FortiDDoS/Configuring_SPP_policy_settings.htm
Question 2
The exhibit shows the configuration for the blocking periods.
FortiDDoS has detected an incoming fragmented flood attack in SPP 0
According with the exhibit, which action does the unit take with the SPP-0 traffic as soon as the attack is detected?
- Incoming fragmented packets from all sources are blocked for at least 60 seconds.
- Incoming fragmented packets from all identified malicious sources are blocked for at least 120 seconds.
- Incoming fragmented packets from all sources are blocked for at least 15 seconds.
- All incoming packets from all sources are blocked for at least 15 seconds.
Correct answer: C
Explanation:
Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 264 Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 264
Question 3
A FortiDDoS device must be deployed as soon as possible in a customer network that is currently under a DDoS attack. Which values are recommended to use for the configured minimum thresholds?
- The factory default values.
- The factory default values increased by a percentage that depends on the customer traffic volume.
- The easy setup values.
- The system recommended values after a one-hour learning period.
Correct answer: D
Explanation:
Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 126 Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 126
Question 4
The exhibit shows the partial configuration settings to generate the system recommended values for the configured minimum thresholds.
During the learning period, the maximum packet rate for UDP traffic to port 53 was 2,000 packets per second. According with the exhibit, what will be the system recommended value for the configured minimum threshold for UDP traffic to port 53?
- 8,000 packets per second
- 2,000 packets per second
- 400 packets per second
- 10,000 packets per second
Correct answer: A
Explanation:
Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 361 Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 361
Question 5
Which of the following events can make FortiDDoS drop packets? (Choose two.)
- SPPs are working in detection mode.
- Packets match an access list with action deny.
- One direction of the traffic is crossing the FortiDDoS, but the other direction is not (asymmetric routing).
- A violation of the TCP protocol in a TCP session.
Correct answer: CD
HOW TO OPEN VCE FILES
Use VCE Exam Simulator to open VCE files
HOW TO OPEN VCEX AND EXAM FILES
Use ProfExam Simulator to open VCEX and EXAM files
ProfExam at a 20% markdown
You have the opportunity to purchase ProfExam at a 20% reduced price
Get Now!