Fortinet NSE8_811 - Fortinet NSE 8 Written Exam Exam
Page: 3 / 12
Total 60 questions
Question #11 (Topic: Topic 1)
Refer to the exhibit.
[Fortinet-NSE8-811-1.0/xmlfile-12_1.png]
A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems
connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time
debug shows the output in the exhibit when site A is disconnected.
Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?
[Fortinet-NSE8-811-1.0/xmlfile-12_1.png]
A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems
connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time
debug shows the output in the exhibit when site A is disconnected.
Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?
A. set route-overlap allow
B. set single-source disable
C. set enforce-unique-id disable
D. set add-route enable
Answer: A
Question #12 (Topic: Topic 1)
A customer wants to enable SYN flood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet from a new source
IP address.
Which SYN flood mitigation mode must the customer use?
IP address.
Which SYN flood mitigation mode must the customer use?
A. SYN retransmission
B. SYN/ACK cookie
C. SYN cookie
D. ACK cookie
Answer: C
Question #13 (Topic: Topic 1)
Refer to the exhibit.
[Fortinet-NSE8-811-1.0/xmlfile-13_1.png]
You configured AV and Web filtering for your outgoing Internet connections. You later notice that not all Web sessions are being inspected and you start
troubleshooting the problem.
Referring to the exhibit, what can be causing this problem?
[Fortinet-NSE8-811-1.0/xmlfile-13_1.png]
You configured AV and Web filtering for your outgoing Internet connections. You later notice that not all Web sessions are being inspected and you start
troubleshooting the problem.
Referring to the exhibit, what can be causing this problem?
A. The Web session is using QUIC which is not inspected by the FortiGate.
B. There are problems with the connection to the Web filter servers, therefore the Web session cannot be categorized.
C. The SSL inspection options are not set to deep inspection.
D. Web filtering is not licensed; therefore, no inspection occurs.
Answer: A
Question #14 (Topic: Topic 1)
You are administering the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GUI of the blade located in logical slot 3 of the
secondary chassis in a high-availability cluster.
Which URL will accomplish this task?
secondary chassis in a high-availability cluster.
Which URL will accomplish this task?
A. https://192.168.1.99:44322
B. https://192.168.1.99:44323
C. https://192.168.1.99:44313
D. https://192.168.1.99:44302
Answer: B
Question #15 (Topic: Topic 1)
Refer to the exhibit.
[Fortinet-NSE8-811-1.0/xmlfile-15_1.png]
Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
[Fortinet-NSE8-811-1.0/xmlfile-15_1.png]
Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
A. LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802.3ad trunk on another device.
B. LAG-1 and LAG-2 should be connected to a 4-port single 802.3ad trunk on another device.
C. port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.
D. LAG-1 and LAG-2 should be connected to a single 4-port 802.3ad interface on the FortiGate-A.
Answer: AC
