Fortinet
NSE8_812 · Question #73
A customer wants to enable SYN flood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet from a new source IP address. Which SYN flood mitigation mode…
The correct answer is C. SYN cookie. See the full explanation below for the reasoning.
Question
A customer wants to enable SYN flood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet from a new source IP address.
Which SYN flood mitigation mode must the customer use?
Options
- ASYN retransmission
- BSYN/ACK cookie
- CSYN cookie
- DACK cookie
How the community answered
(39 responses)- A3% (1)
- B8% (3)
- C85% (33)
- D5% (2)
Community Discussion
No community discussion yet for this question.