FCP – FortiGate Administrator 7.6 — Question 4

An administrator wanted to configure an IPS sensor to block traffic that triggers a signature set number of times during a specific time period.
How can the administrator achieve the objective?

Answer options

• A. Use IPS group signatures, set rate-mode 60.
• B. Use IPS packet logging option with periodical filter option.
• C. Use IPS filter, rate-mode periodical option.
• D. Use IPS filter, rate-mode periodical option.

Correct answer: C

Explanation

The correct answer is C because using an IPS filter with the periodical rate-mode option allows for blocking traffic based on repeated signature triggers within a set time frame. Option A does not address the specific blocking requirement, while options B and D are not relevant to the task of blocking traffic based on signature triggers.