NSE8_810 Fortinet Network Security Expert 8 Written Exam (NSE8 810) Dumps

1. Exhibit

Click the Exhibit button.

You are working on an entry level model FortiGate that has been configured in flow-based inspection mode with various settings optimized for performance. It appears that the main Internet firewall policy is using the antivirus profile labelled default . Your customer has found that some virus samples are not being caught by the FortiGate.

Referring to the exhibit, what is causing the problem?

2. Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

3. Exhibit

You created a custom health-check for your FortiWeb deployment.

Referring to the output shown in the exhibit, which statement is true?

4. A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.

- E-mails can only be accepted if a valid e-mail account exists.

- Only authenticated users can send e-mails out

Which two actions will satisfy the requirements? (Choose two. )

5. Click the Exhibit button.

Your company has two data centers (DC) connected using a Layer 3 network. Servers in farm A need to connect to servers in farm B as though they all were in the same Layer 2 segment.

What would be configured on the FortiGates on each DC to allow such connectivity?

6. Click the Exhibit button.

You configured an IPsec tunnel to a branch office. Now you want to make sure that the encryption of the tunnel is offloaded to hardware.

Referring to the exhibit, which statement is true?

7. You want to access the JSON API on FortiManager to retrieve information on an object.

In this scenario, which two methods will satisfy the requirement? (Choose two.)

8. You have a customer with a SCADA environmental control devices that is trigged a false-positive OPS alert whenever the device's Web GUI is accessed. You cannot seem to create a functional custom IPS filter expert this behavior, and it appears that the device is so old that it does HTTPS support. You need to prevent the false posited IPS alert occurring.

In this scenario, which two actions would accomplish this task? (Choose two.)

9. Exhibit

Click the Exhibit button.

A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it.

However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.

Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

10. Exhibit

Click the Exhibit button. The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb.

Which statement represents the purpose of this policy?

11. You want to manage a FortiCloud service. The FortiGate shows up in your list devices on the FortiCloud Web site, but all management functions are either missing or grayed out.

Which statement a correct in this scenario?

12. FortiMail configured with the protected domain "internal lab".

Which two envelopes addresses will need an access control rule to relay e-mail sent for unauthenticated users? (Choose two.)

13. You deploy a FortiGate device in a remote office based on the requirements shown below.

-- Due to company's security policy, management IP of your FortiGate is not allowed to access the Internet.

-- Apply Web Filtering, Antivirus, IPS and Application control to the protected subnet.

-- Be managed by a central FortiManager in the head office.

Which action will help to achieve the requirements?

14. Click the Exhibit button.

You log into FortiManager, look at the Device Manager window and notice that one of your managed devices is not in normal status.

Referring to the exhibit, which two statements correctly describe the affected device’s status and result? (Choose two.)

15. A FortOS devices is used for termination of VPNs for number of remote spoke VPN units (designated group A spokes) using a phase 1 main mode dial-up tunnel using pre-shared. Your company recently acquired another organization. You are asked establish VPN correctively for the newly acquired organization's sites which new devices will be provisioned (designated Group B spokes). Both exiting (Group A) and new (Group B) spoke units are dynamically addressed. You are asked to ensure that spokes from the acquired organization (Group B) have different access permission than your existing VPN spokes (Group A).

Which two solutions meet the represents for the new spoke group? (Choose two.)

16. Click the Exhibit button.

Referring to the exhibit, which two statements are true about local authentication? (Choose two.)

17. Click the exhibit.

You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit.

However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.

In this scenario, which command will solve this problem?