NSE 4 – FortiGate 6.2 — Question 21

An administrator wants to throttle the total volume of SMTP sessions to their email server.
Which DoS sensor can the administrator use to achieve this?

Answer options

• A. ip_src_session
• B. ip_dst_session
• C. udp_flood
• D. tcp_port_scan

Correct answer: B

Explanation

The correct answer is B, ip_dst_session, as it specifically monitors and can limit sessions directed to a particular destination, like the email server in this case. Options A and D focus on source sessions and scanning for open ports, respectively, which do not address the management of SMTP sessions. Option C, udp_flood, pertains to UDP traffic and is unrelated to session management for SMTP.