Exam NSE8_812 topic 1 question 47 discussion

Actual exam question from Fortinet's NSE8_812

Question #: 47
Topic #: 1

A customer with a FortiDDoS 200F protecting their fibre optic internet connection from incoming traffic sees that all the traffic was dropped by the device even though they were not under a DoS attack. The traffic flow was restored after it was rebooted using the GUI.
Which two options will prevent this situation in the future? (Choose two.)

A. Change the Adaptive Mode.
B. Create an HA setup with a second FortiDDoS 200F.
C. Move the internet connection from the SFP interfaces to the LC interfaces.
D. Replace with a FortiDDoS 1500F.

Show Suggested Answer

Suggested Answer: AB 🗳️

by ama6 at Sept. 24, 2023, 6:55 p.m.

Comments

Submit Cancel

kinge2

9 months ago

Selected Answer: BC

If that secondary node fails as well (double failure) and you do not want the traffic to fail, configure the secondary system to 'fail open' (copper fail open, 1200B LC ports fail open, or you need a bypass bridge if you are using SFP/SFP+s). FortiDDoS appliances can be deployed as standalone appliances or as members of a high availability (HA) pair. FortiDDoS supports active-passive cluster pairs. In an HA pair, one node is the master node, and the other is called the slave node.

upvoted 1 times

...

JJISHE

1 year, 2 months ago

Selected Answer: BC

I suggest B and C for this DOC (https://help.fortinet.com/fddos/4-7-0/fortiddos/HA_feature_overview.htm)

upvoted 1 times

...

re_j0hn

1 year, 3 months ago

Selected Answer: BD

B and D as per ama6.

upvoted 1 times

...

Golux

1 year, 5 months ago

Correct Answer AC https://help.fortinet.com/fddos/4-3-0/FortiDDoS/Understanding_FortiDDoS_rate_limiting_thresholds_.htm also note that LC interfaces have bypass.

upvoted 2 times

ac89l

1 year, 4 months ago

I agree - LC interfaces have bypass in case of failure D is incorrect because the issue resolved after a reboot not sure about B

upvoted 1 times

...

ama6

1 year, 8 months ago

The other options are incorrect. Option A is incorrect because changing the Adaptive Mode will not prevent the device from dropping traffic. Option C is incorrect because moving the internet connection from the SFP interfaces to the LC interfaces will not change the throughput capacity of the device

upvoted 1 times

...

ama6

1 year, 8 months ago

Explanation: B is correct because creating an HA setup with a second FortiDDoS 200F will provide redundancy in case one of the devices fails. This will prevent all traffic from being dropped in the event of a failure. D is correct because the FortiDDoS 1500F has a larger throughput capacity than the FortiDDoS 200F. This means that it will be less likely to drop traffic even under heavy load.

upvoted 2 times

...