NSE 8 – Network Security Expert (811) — Question 17

You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?

Answer options

• A. asymmetric mode
• B. aggressive aging mode
• C. rate limiting mode
• D. blocking mode

Correct answer: B

Explanation

Aggressive aging mode is effective against slow connection attacks because it proactively identifies and drops slow connections that are trying to keep a session open without sending data. The other modes like asymmetric mode, rate limiting mode, and blocking mode do not specifically target the characteristics of Slowloris attacks, making them less effective for this purpose.