exam questions

Exam NSE8_812 All Questions

View all questions & answers for the NSE8_812 exam

Exam NSE8_812 topic 1 question 47 discussion

Actual exam question from Fortinet's NSE8_812
Question #: 47
Topic #: 1
[All NSE8_812 Questions]

A customer with a FortiDDoS 200F protecting their fibre optic internet connection from incoming traffic sees that all the traffic was dropped by the device even though they were not under a DoS attack. The traffic flow was restored after it was rebooted using the GUI.
Which two options will prevent this situation in the future? (Choose two.)

  • A. Change the Adaptive Mode.
  • B. Create an HA setup with a second FortiDDoS 200F.
  • C. Move the internet connection from the SFP interfaces to the LC interfaces.
  • D. Replace with a FortiDDoS 1500F.
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
kinge2
4 months, 1 week ago
Selected Answer: BC
If that secondary node fails as well (double failure) and you do not want the traffic to fail, configure the secondary system to 'fail open' (copper fail open, 1200B LC ports fail open, or you need a bypass bridge if you are using SFP/SFP+s). FortiDDoS appliances can be deployed as standalone appliances or as members of a high availability (HA) pair. FortiDDoS supports active-passive cluster pairs. In an HA pair, one node is the master node, and the other is called the slave node.
upvoted 1 times
...
JJISHE
10 months, 1 week ago
Selected Answer: BC
I suggest B and C for this DOC (https://help.fortinet.com/fddos/4-7-0/fortiddos/HA_feature_overview.htm)
upvoted 1 times
...
re_j0hn
10 months, 4 weeks ago
Selected Answer: BD
B and D as per ama6.
upvoted 1 times
...
Golux
1 year ago
Correct Answer AC https://help.fortinet.com/fddos/4-3-0/FortiDDoS/Understanding_FortiDDoS_rate_limiting_thresholds_.htm also note that LC interfaces have bypass.
upvoted 2 times
ac89l
11 months, 4 weeks ago
I agree - LC interfaces have bypass in case of failure D is incorrect because the issue resolved after a reboot not sure about B
upvoted 1 times
...
...
ama6
1 year, 3 months ago
The other options are incorrect. Option A is incorrect because changing the Adaptive Mode will not prevent the device from dropping traffic. Option C is incorrect because moving the internet connection from the SFP interfaces to the LC interfaces will not change the throughput capacity of the device
upvoted 1 times
...
ama6
1 year, 3 months ago
Explanation: B is correct because creating an HA setup with a second FortiDDoS 200F will provide redundancy in case one of the devices fails. This will prevent all traffic from being dropped in the event of a failure. D is correct because the FortiDDoS 1500F has a larger throughput capacity than the FortiDDoS 200F. This means that it will be less likely to drop traffic even under heavy load.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago