Free Fortinet FortiDDoS Exam Dumps Questions & Answers

As the exhibit shows, a FortiDDoS port2 is connected to the protected server. Its port1 is connected to the Internet. The FortiDDoS has 8 interfaces for user traffic. The exhibit also shows a screenshot of the unit dashboard.


The administrator noticed that the statistics are showing all the traffic coming from the Internet to the protected server as outbound, instead of inbound. Based on the exhibit, what is the cause of this mislabeling?

• A.SPP 0 is operating in detection mode.
• B.The protected server is connected to a wrong FortiDDoS interface. It must be connected to an interface from port 5 to port 8.
• C.The SPP 0 link is down.
• D.FortiDDoS interfaces are wrongly connected. The interface port1 must be connected to the protected server and port2 must be connected to the Internet.

A FortiDDoS device is configured to mitigate SYN flood attacks using the SYN cookie mode. What action does it take when it is mitigating an SYN flood attack and a SYN packet from a new source IP address arrives?

• A.It replies with a SYN/ACK packets. One containing the right acknowledge value, the other one with a wrong acknowledge value.
• B.It replies with a SYN/ACK packet containing a cookie value in the TCP acknowledge field.
• C.It replies with a RST packet if the SYN packet does not contain the right cookie in the sequence field.
• D.It replies with a SYN/ACK packet containing a cookie value in the TCP sequence field.