Fortinet Fortinet Certifications NSE8_810 Questions & Answers

• Question 31:

  Click the Exhibit button.

  

  A customer has just finished their Azure deployment to secure a Web application behind a FortiGate and a FortiWeb. Now they want to add components to protect against advanced threats (zero day attacks), centrally manage the entire environment, and centrally monitor Fortinet and non-Fortinet products.

  Which Fortinet solutions will satisfy these requirements?

  A. Use FotiAnalyzer lor monitor in Azure, FortiSlEM for managemnet, and FortiSandbox for zero day attacks on their local network.

  B. Use Fortianalyzer for monitor Azure, FortiSiEM for management, and FortiGate has zero day attacks on their local network.

  C. Use FortiManager for management in Azure, FortSIEM for monitoring and FcrtiSandbox for zero day attacks on their local network.

  D. Use FortiSIEM for management Azure, FortiManager for management, and FortrGate for zero day attacks on their local network.

  Correct Answer: C

• Question 32:

  Click the Exhibit button.

  You have installed a FortiSandbox and configured it in your FortiMail. Referring to the exhibit, which two statements are correct? (Choose two.)

  

  A. FortiMail will cache the results for 30 minutes.

  B. FortiMail will wait for 30 minutes to obtain the scan results.

  C. If the FortiSandbox with IP 10.10 10 3 is not available, the e-mail will be checked by the FortiCloud Sandbox.

  D. If FortiMail is not able to obtain the results from the fortiGuard quenes. URls will not be checked by the FortiSandbox.

  Correct Answer: BD

• Question 33:

  Click the Exhibit button.

  Your customer is using dynamic routing to exchange the default route between two FortiGates using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below:

  

  According to the exhibit, what is causing the problem?

  

  A. A prefix for the detail route is missing

  B. OSPF requires the redistribution of connected networks.

  C. There is an OSPF interface network-type mismatch.

  D. FG2 is within the wrong OSPF area.

  Correct Answer: A

• Question 34:

  Click to the Exhibit button. You need to apply the security features below to the network shown in the exhibit. -high grade DDoS protection -Web security and load balancing for Server1 and Server2 -Solution must be PCI DSS compliant -Enhanced security to DNS 1 and DNS 2

  

  What are three solutions for this scenario? (Choose three.)

  A. FortiWeb forVDOM-A

  B. FortDDoS between FG1 and FG2 and the Internet

  C. FortiADC for VDOM-A

  D. FortADC for VDoM-B

  E. FortiDDoS between FG1 and FG2 and VDOMs

  Correct Answer: CDE

• Question 35:

  You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.

  Which URL will accomplish this task?

  A. https//192.168.1.99.44302

  B. https//192.168.1.99.44313

  C. https//192.168.1.99.44322

  D. https//192.168.1.99.44323

  Correct Answer: B

• Question 36:

  Click the Exhibit button.

  

  Referring to the exhibit, which two statements are true about local authentication? (Choose two.)

  A. The user will be blocked 15 seconds after five login failures.

  B. When a ClientHello message indicating a renegotiation is received, the FortiGate will allow the TCP connection.

  C. The user's IP address will be blocked 15 seconds after five login failures.

  D. After five minutes, the user will need to re-authenticate.

  Correct Answer: CD

• Question 37:

  Click the Exhibit button. An administrator implements a multi-chassis link aggregation (MCLAG) solution using two FortiSwitch 448Ds and one FortiGate 3700D. As describes in the network topology shown in the exhibit, two links are connected to each FortiSwitch. What is requires to implement this solution? (Choose two.)

  

  A. a FortiGate with a hardware or a software switch

  B. an ICL link between both FortiSwitches

  C. a disabled FortiLink, split interface

  D. two Link aggregated (LAG) interfaces on the FortiGate side

  Correct Answer: CD

• Question 38:

  Click the Exhibit button.

  Referring to the exhibit, which command-line option for deep inspection SSL would have the FortiGate resign all untrusted self-signed certificates with the trusted Fortinet_CA_SSL certificate?

  

  A. allow

  B. block

  C. ignore

  D. inspect

  Correct Answer: A

• Question 39:

  Exhibit Your organization has a FortrGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.

  

  Referring to the exhibit, which two FortiGate BGP features would be used to accomplish this task' (Choose two.)

  A. Enable BFD

  B. Enable EBGP multipath

  C. Enable graceful restart

  D. Enable synchronization

  Correct Answer: AC

• Question 40:

  Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)

  

  A. The IPv4 traffic for nse8user is filtered using the DNS profile.

  B. The IPv6 traffic for nse8user is filtered using the DNS profile.

  C. The IPv4 policy is allowing security profile groups.

  D. The Web traffic for nse8user is being filtered differently in IPv4 and IPv6.

  Correct Answer: AD