Fortinet Fortinet Certifications NSE8_810 Questions & Answers

• Question 11:

  Click the Exhibit button.

  

  Referring to the exhibit, which two statements are true? (Choose two.)

  A. port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B

  B. LAG-1 and LAG 2 should be connected to a single 4-port 802 3ad interface on the FortiGate-A.

  C. LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802 3ad trunk on another device.

  D. LAG-1 and LAG-2 should be connected to a 4-port single 802 3ad trunk on another device.

  Correct Answer: BC

• Question 12:

  Click the Exhibit button.

  

  You configured AV and Web filtering for your outgoing Internet connections. You later noticed that not all Web sessions are being inspected and you start troubleshooting the problem.

  Referring to the exhibit, what would cause this problem?

  A. The Web session is using QUIC which a not inspected by the FortiGate

  B. These are problem with the connection to the Web filter servers, therefore the Web session cannot be categorized.

  C. The SSL inspection options are not set to inspection

  D. Web filtering is not licensed, therefore no inspection occurs.

  Correct Answer: C

• Question 13:

  Exhibit

  

  When deploying a new FortiGate-VMX Security node, an administrator received the error message shown in the exhibit In this scenario, which statement is correct?

  A. The vCenter was not able locate the FortiGate-VMX's OVF file.

  B. The vCenter could not connect to the FortiGate Service Manager

  C. The NSX Manager was not able to connect on the FortiGate Service Manager's RestAPI service.

  D. The FortiGate Service Manager did not have the proper permission to register the FortiGate-VMX Service.

  Correct Answer: D

• Question 14:

  You are building a FortiGala cluster which is stretched over two locations. The HA connections for the cluster are terminated on the data centers. Once the FortiGates have booted, they do form a cluster. The network operators inform you that CRC eoors are present on the switches where the FortiGAtes are connected.

  What would you do to solve this problem?

  A. Replace the caables where the CRC errors occur.

  B. Change the ethertype for the HA packets.

  C. Set the speedduplex setting to 1 Gbps /Full Duplex.

  D. Place the HA interfaces in dedicated VLANs.

  Correct Answer: A

• Question 15:

  Exhibit

  

  Click the Exhibit button.

  You are working on an entry level model FortiGate that has been configured in flow-based inspection mode with various settings optimized for performance. It appears that the main Internet firewall policy is using the antivirus profile labelled default. Your customer has found that some virus samples are not being caught by the FortiGate.

  Referring to the exhibit, what is causing the problem?

  A. The set default-db configure was set to extreme.

  B. The set options scan configuration items should have been changed to not option scan avmonitor.

  C. The default AV profile was modified to use quick scan-mode.

  D. The mobile-malware-db configuration was set to enable.

  Correct Answer: C

• Question 16:

  You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active ?Passive FortinControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values:

  onfig system ha

  set mode dual

  set password fortinetnse8

  set group-id 5

  set chassis-id 1

  set minimize-chassis-failover enable

  set hbdev "b1"

  end

  Both FortiControllers show Master status. What is the problem in this scenario?

  A. The management interface of both FotiControllers was connected on the some network.

  B. The priority should be set higher for ForControllers on slot-1.

  C. The b1 interface the two FortiConrollers do not see each other.

  D. The chassis ID settings on FotiControllers on slot 2 should be set to 2.

  Correct Answer: B

• Question 17:

  You cannot the FortiGales default gateway 10.10.10 .1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan 1 and its IP address 10.10 .10 K74 During the troubleshooting, tests, you confirmed that you can plug other IP addresses in the 10.10.10. 0/24 subnet from the FortiGAte CLI without packets lost.

  Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

  A. diagnose ip arp list

  B. diag aniffer packet wan1 'arp and host 10.10.1O.1'

  C. diagnose hardware deviceinfo nice wan1

  D. diagnose debug flow filter addt 10.10.10.1

  E. diagnose debug flow trace trace 10

  Correct Answer: AD

• Question 18:

  Exhibit

  Click the Exhibit button.

  

  A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it.

  However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.

  Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

  A. set enforce-unique-id disable

  B. set add-router enable

  C. set single-source disable

  D. set router-overlap allow

  Correct Answer: D

• Question 19:

  An old router has been replaced by a FortiWAN device. The FortiWAN has inherited the router's management IP address and now the network administrator needs to remove the old router from the FortiSIEM configuration.

  Which two statements are true about this operation? (Choose two.)

  A. FortiSIEM will discover a new device for the FortiWAN with the same IP.

  B. The old router will be completely deleted from FortiSIEM's CMDB.

  C. FotiSEIM needs a special syslog for FortiWAN.

  D. FortiSIM will move the old router device into the Decommission folder.

  Correct Answer: AB

• Question 20:

  Refer to the Exhibit button.

  You need to run a script in FortiManager against managed FortiGate devices in your organization to install a configuration for a new static route. Which two scripts will successfully configure the static route on the managed device? (Choose two.)

  

  A. Script 1

  B. Script 2

  C. Script 3

  D. Script 4

  Correct Answer: BC