NSE4 · Question #361
Which statement best describes the objective of the SYN proxy feature available in SP processors?
The correct answer is D. Protect against SYN flood attacks. The SYN proxy feature in FortiGate's SP processors is designed to protect against SYN flood attacks by intercepting and validating TCP handshakes before forwarding them to the destination server.
Question
Which statement best describes the objective of the SYN proxy feature available in SP processors?
Options
- AAccelerate the TCP 3-way handshake
- BCollect statistics regarding traffic sessions
- CAnalyze the SYN packet to decide if the new session can be offloaded to the SP processor
- DProtect against SYN flood attacks.
How the community answered
(28 responses)- B4% (1)
- C7% (2)
- D89% (25)
Why each option
The SYN proxy feature in FortiGate's SP processors is designed to protect against SYN flood attacks by intercepting and validating TCP handshakes before forwarding them to the destination server.
While SYN proxy handles the TCP handshake, its primary objective is protection against SYN floods, not general acceleration of the handshake process.
Collecting statistics is a general FortiGate function, not the specific objective of the SYN proxy feature.
While the SP processor might analyze packets, the core objective of the SYN proxy specifically refers to its role in mitigating SYN flood attacks, not just offloading decisions.
SYN proxy protects backend servers from SYN flood denial-of-service (DoS) attacks by intercepting the initial TCP SYN packets and completing the 3-way handshake with the client before establishing a connection with the protected server, thus validating legitimate clients.
Concept tested: SYN proxy for SYN flood protection
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/475176/syn-proxy-and-ack-proxy
Topics
Community Discussion
No community discussion yet for this question.