Fortinet
NSE8_810 · Question #25
Click the Exhibit button. The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device. Which two statements are true about the traffic matching being inspected by…
Sign in or unlock NSE8_810 to reveal the answer and full explanation for question #25. The question stem and answer options stay visible for context.
Advanced Threat Protection and Content Inspection
Question
Click the Exhibit button. The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device. Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)
Exhibit
Options
- ATraffic that does not match any SPP policy will be inspected by this SPP.
- BFortiDDoS will not send a SYN/ACK if a SYN packet is coming from an IP address that is not in the legitimate IP (LIP) address table.
- CFortiDDoS will start dropping packets as soon as the traffic exceeds the configured minimum threshold.
- DSYN packets with payloads will be dropped.
Unlock NSE8_810 to see the answer
You've previewed enough free NSE8_810 questions. Unlock NSE8_810 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#FortiDDoS#SPP configuration#SYN flood protection#LIP table