FortiDDoS 試験問題を無料オンラインアクセス

Which of the following events can make FortiDDoS drop packets? (Choose two.)

• A.Packets match an access list with action deny.
• B.A violation of the TCP protocol in a TCP session.
• C.One direction of the traffic is crossing the FortiDDoS, but the other direction is not (asymmetric routing).
• D.SPPs are working in detection mode.

A FortiDDoS device is configured to mitigate SYN flood attacks using the SYN cookie mode. What action does it take when it is mitigating an SYN flood attack and a SYN packet from a new source IP address arrives?

• A.It replies with a RST packet if the SYN packet does not contain the right cookie in the sequence field.
• B.It replies with a SYN/ACK packet containing a cookie value in the TCP acknowledge field.
• C.It replies with a SYN/ACK packets. One containing the right acknowledge value, the other one with a wrong acknowledge value.
• D.It replies with a SYN/ACK packet containing a cookie value in the TCP sequence field.