Fortinet NSE8_810 Exam Practice Questions (P. 5)

Refer to the Exhibit button.
You need to run a script in FortiManager against managed FortiGate devices in your organization to install a configuration for a new static route. Which two scripts will successfully configure the static route on the managed device? (Choose two.)

You are building a FortiGate cluster which is stretched over two locations. The HA connections for the cluster are terminated on the local switches in the data centers. Once the FortiGates have booted, they do not form a cluster. The network operations inform you that CRC errors are present on the switches where the
FortiGates are connected.
What should you do to solve this problem?

You cannot ping the FortiGate's default gateway 10.10.10.1 from the FortiGate CLI. The FortiGate's interface facing the default gateway is wan1 and its IP address is 10.10.10.254/24. During the initial troubleshooting tests, you confirmed that you can ping other IP addresses in the 10.10.10.0/24 subnet from the
FortiGate CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

You have deployed a FortiGate in NAT/Route mode as a Secure Web Gateway with a few IP-based authentication firewall policies. Your customer reports that some users now have different browsing permissions from what is expected. All these users are browsing using Internet Explorer through a Remote Desktop
Connection to a Terminal Server.
When you look at the FortiGate logs, the username for the Terminal Server IP is not consistent.
Which action will correct this problem?

Click the Exhibit button.
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.
Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)