Free NSE8_811 – Fortinet NSE 8 Written Exam Practice Test Question

Select all that apply, then click Submit answer.

• ○

  If FortiMail is not able to obtain the results from the FortiGuard queries, URIs will not be checked by the FortiSandbox.

• ○

  FortiMail will cache the results for 30 minutes

• ○

  If the FortiSandbox with IP 10.10.10.3 is not available, the e-mail will be checked by the FortiCloud Sandbox.

• ○

  FortiMail will wait up to 30 minutes to obtain the scan results.
  
  

Select all that apply, then click Submit answer.

• ○

  LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802.3ad trunk on another device.

• ○

  LAG-1 and LAG-2 should be connected to a 4-port single 802.3ad trunk on another device.

• ○

  port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.

• ○

  LAG-1 and LAG-2 should be connected to a single 4-port 802.3ad interface on the FortiGate-A.
  
  

Select all that apply, then click Submit answer.

• ○

  vd-lan connects to FortiAuthenticator as a regular FSSO client.

• ○

  root is configured for FSSO while vd-lan is configured for RSSO.

• ○

  root sends "RADIUS Accounting Messages" to FortiAuthenticator

• ○

  vd-lan receives authentication messages from root using FSSO.
  
  

Select all that apply, then click Submit answer.

• ○

  Configure recipient address verification.

• ○

  Configure inbound recipient policies.

• ○

  Configure outbound recipient policies.

• ○

  Configure access control rules.
  
  

Select all that apply, then click Submit answer.

• ○

  Implement a new phase 1 dial-up main mode tunnel with a different pre-shared key than the Group A spokes.

• ○

  Implement a new phase 1 dial-up main mode tunnel with certificate authentication.

• ○

  Implement a new phase 1 dial-up main mode tunnel with pre-shared keys and XAuth.

• ○

  Implement separate phase 1 dial-up aggressive mode tunnels with a distinct peer ID.
  
  

Select an option, then click Submit answer.

• ○

  Enable SD-WAN FEC (Forward Error Correction) on the FortiGate at the remote site.

• ○

  Install both Supervisor and Collector on each remote site.

• ○

  Install local Collectors on each remote site.

• ○

  Disable real-time log upload on the remote sites.
  
  

Select an option, then click Submit answer.

• ○

  The FortiGate is able to read the URL within HTTPS sessions when using SSL certificate inspection so the website will be blocked by the "Information Technology".

• ○

  The website will be blocked by category "Information Technology" as the SNI takes precedence over the certificate name.

• ○

  The website will be allowed by category "Business" as the certificate name takes precedence over the URL.

• ○

  Only with SSL deep inspection enabled will the FortiGate be able to categorized this website.
  
  

Select an option, then click Submit answer.

• ○

  The policy redirects all HTTPS URLs to HTTP.

• ○

  The policy redirects all HTTP URLs to HTTPS.

• ○

  The policy redirects only HTTP URLs containing the ^/(.*)$ string to HTTPS.

• ○

  The policy redirects only HTTPS URLs containing the ^/(.*)$ string to HTTP.
  
  

Select an option, then click Submit answer.

• ○

  Layer 3

• ○

  Layer 4

• ○

  Layer 7
  

• ○

  Layer 2
  
  

Select an option, then click Submit answer.

• ○

  The ICMP packets are being blocked by an implicit deny policy.

• ○

  A directly connected subnet is being partially superseded by an OSPF redistributed subnet.

• ○

  Enabling NAT on the VPN firewall policy will solve the problem.

• ○

  The incoming access list should have an accept action instead of a deny action to solve the problem.