NSE 6

FortiDDoS Administrator

Part of NSE 6: Cloud Security

Targets: Product version not specified in the blueprint
Blueprint source: Fortinet Training Institute course page (course objectives) ↗

Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by fortinet. Objectives are transcribed and mapped by hand, so this page may contain mistakes or may have fallen behind the vendor's current material: exam objectives, versions, numbering and availability all change without notice. Treat fortinet's own certification portal as the source of truth and verify against it before you book anything.

These objectives come from Fortinet's course page for this product, not from an exam blueprint: Fortinet has not published one for this exam yet. The material is what the course teaches, and an exam blueprint may organise or weight it differently.

Course objectives

1.01 Train your FortiDDoS to recognize your unique network patterns
Article coming
1.02 Choose the correct FortiDDoS model
On this site: FortiDDoS: Detection Versus Prevention, Thresholds, and How Blocking Decides
1.03 Defend against both volumetric and mechanistic DDoS attacks
On this site: FortiWeb Deployment, Server Policies, and Application Delivery, FortiWeb Protection: Signatures, Machine Learning, Bots, APIs, and DoS
1.04 Deploy FortiDDoS to protect both network appliances and servers
On this site: FortiWeb Deployment, Server Policies, and Application Delivery, FortiWeb Protection: Signatures, Machine Learning, Bots, APIs, and DoS
1.05 Identify when to use detection and prevention modes
On this site: FortiDDoS: Detection Versus Prevention, Thresholds, and How Blocking Decides
1.06 Implement bypass or a high availability FortiDDoS cluster for maximum service uptime
On this site: FortiGate FGCP High Availability: Active-Passive, Active-Active, and Failover
Tools: fortigate-ha-failover-simulator
1.07 Detect connections from proxies
On this site: FortiDDoS Protection Policies, Proxy Traffic, and Running It Day to Day
1.08 Describe how the blocking periods and penalty factors intelligently determine which packets are dropped after an attack is detected
On this site: FortiDDoS: Detection Versus Prevention, Thresholds, and How Blocking Decides
1.09 Configure access control lists and blocklists
On this site: FortiDDoS: Detection Versus Prevention, Thresholds, and How Blocking Decides
1.10 Mitigate anomalies and SYN floods
On this site: FortiDDoS: Detection Versus Prevention, Thresholds, and How Blocking Decides
1.11 Describe the main characteristics of protection policies
On this site: FortiDDoS Protection Policies, Proxy Traffic, and Running It Day to Day
1.12 Characterize different types of attacks by using logs and statistics graphs
On this site: FortiDDoS: Detection Versus Prevention, Thresholds, and How Blocking Decides, FortiDDoS Protection Policies, Proxy Traffic, and Running It Day to Day
1.13 Troubleshoot incorrect threshold levels
On this site: FortiGate Logging and Diagnostics: Where Logs Go and How to Find a Problem
Tools: fortios-sniffer-builder, fortigate-session-table-explainer

Public sources, used in good faith

These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →