File Info
| Exam | FortiDDoS 4.0 Specialist |
| Number | FortiDDoS |
| File Name | Fortinet.FortiDDoS.TestKing.2019-04-14.5q.vcex |
| Size | 132 KB |
| Posted | Apr 14, 2019 |
| Download | Fortinet.FortiDDoS.TestKing.2019-04-14.5q.vcex |
How to open VCEX & EXAM Files?
Files with VCEX & EXAM extensions can be opened by ProfExam Simulator.
Coupon: MASTEREXAM
With discount: 20%
Demo Questions
Question 1
Regarding the switching SPP feature, what is used to determine when FortiDDoS switches the traffic to an alternate SPP?
- Traffic volume
- Destination IP addresses
- Mitigated attacks
- Blocked packets
Correct answer: A
Explanation:
Reference: http://help.fortinet.com/fddos/4-3-0/FortiDDoS/Configuring_SPP_policy_settings.htm Reference: http://help.fortinet.com/fddos/4-3-0/FortiDDoS/Configuring_SPP_policy_settings.htm
Question 2
The exhibit shows the configuration for the blocking periods.
FortiDDoS has detected an incoming fragmented flood attack in SPP 0
According with the exhibit, which action does the unit take with the SPP-0 traffic as soon as the attack is detected?
- Incoming fragmented packets from all sources are blocked for at least 60 seconds.
- Incoming fragmented packets from all identified malicious sources are blocked for at least 120 seconds.
- Incoming fragmented packets from all sources are blocked for at least 15 seconds.
- All incoming packets from all sources are blocked for at least 15 seconds.
Correct answer: C
Explanation:
Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 264 Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 264
Question 3
A FortiDDoS device must be deployed as soon as possible in a customer network that is currently under a DDoS attack. Which values are recommended to use for the configured minimum thresholds?
- The factory default values.
- The factory default values increased by a percentage that depends on the customer traffic volume.
- The easy setup values.
- The system recommended values after a one-hour learning period.
Correct answer: D
Explanation:
Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 126 Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 126
Question 4
The exhibit shows the partial configuration settings to generate the system recommended values for the configured minimum thresholds.
During the learning period, the maximum packet rate for UDP traffic to port 53 was 2,000 packets per second. According with the exhibit, what will be the system recommended value for the configured minimum threshold for UDP traffic to port 53?
- 8,000 packets per second
- 2,000 packets per second
- 400 packets per second
- 10,000 packets per second
Correct answer: A
Explanation:
Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 361 Reference: https://s3.amazonaws.com/fortinetweb/docs.fortinet.com/v2/attachments/44f876f1-2436-11e9-b20a-f8bc1258b856/fortiddos-5-0-0-handbook.pdf page 361
Question 5
Which of the following events can make FortiDDoS drop packets? (Choose two.)
- SPPs are working in detection mode.
- Packets match an access list with action deny.
- One direction of the traffic is crossing the FortiDDoS, but the other direction is not (asymmetric routing).
- A violation of the TCP protocol in a TCP session.
Correct answer: CD
