NSE8_811 sample questions

Question 1

Refer to the exhibit.

You configured AV and Web filtering for your outgoing Internet connections. You later notice that not all Web sessions are being inspected and you start troubleshooting the problem.

Referring to the exhibit, what can be causing this problem?

Accepted Answer

The Web session is using QUIC which is not inspected by the FortiGate.

Answer

There are problems with the connection to the Web filter servers, therefore the Web session cannot be categorized.

Answer

The SSL inspection options are not set to deep inspection.

Answer

Web filtering is not licensed; therefore, no inspection occurs.

Question 2

Refer to the exhibit.

A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time debug shows the output in the exhibit when site A is disconnected.

Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

Accepted Answer

set route-overlap allow

Answer

set single-source disable

Answer

set enforce-unique-id disable

Answer

set add-route enable

Question 3

Refer to the exhibit. Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMail as a high risk?

Accepted Answer

The high-risk file will be discarded by malware/virus outbreak protection.

Answer

The high-risk file will be discarded by attachment analysis.

Answer

The high-risk file will go to the system quarantine.

Answer

The high-risk file will be received by the recipient.

Question 4

A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.

Which statement about creating the object LAN is correct?

Accepted Answer

Create a new object called LAN and enable per-device mapping.

Answer

Create a new object called LAN and promote it to the global database.

Answer

Create a new object called LAN and use it as a variable on a TCL script.

Answer

Create a new object called LAN and set meta-fields per remote site.

Question 5

Refer to the exhibit.

A customer is using dynamic routing to exchange the default route between two FortiGate devices using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below.

According to the exhibit, what is causing the problem?

Accepted Answer

There is an OSPF interface network-type mismatch.

Answer

FG2 is within the wrong OSPF area.

Answer

OSPF requires the redistribution of connected networks.

Answer

A prefix for the default route is missing.

Question 6

A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.

• E-mails can only be accepted if a valid e-mail account exists.
• Only authenticated users can send e-mails out.

Which two actions will satisfy the requirements? (Choose two.)

Accepted Answer

Configure recipient address verification.

Accepted Answer

Configure access control rules.

Answer

Configure inbound recipient policies.

Answer

Configure outbound recipient policies.

NSE8_811 Fortinet NSE 8 Written Exam Practice Questions

Create an account to continue.

Create an account to continue.

Related exams