Fortinet
NSE8_812 · Question #104
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device. Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)
The correct answer is A. Traffic that does not match any SPP policy will be inspected by this SPP. D. SYN packets with payloads will be dropped. See the full explanation below for the reasoning.
Question
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device. Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)
Options
- ATraffic that does not match any SPP policy will be inspected by this SPP.
- BFortiDDoS will not send a SYN/ACK if a SYN packet is coming from an IP address that is not in the legitimate IP (LIP) address table.
- CFortiDDoS will start dropping packets as soon as the traffic exceeds the configured minimum threshold.
- DSYN packets with payloads will be dropped.
How the community answered
(53 responses)- A75% (40)
- B9% (5)
- C15% (8)
Community Discussion
No community discussion yet for this question.