Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Fortinet NSE8_810

Fortinet NSE8_810 Exam Practice Questions (P. 5)

  • Full Access (60 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #21
Refer to the Exhibit button.
You need to run a script in FortiManager against managed FortiGate devices in your organization to install a configuration for a new static route. Which two scripts will successfully configure the static route on the managed device? (Choose two.)

  1. A
    Script 1
  2. B
    Script 2
  3. C
    Script 3
  4. D
    Script 4

Correct Answer:
BC

Question #22
You are building a FortiGate cluster which is stretched over two locations. The HA connections for the cluster are terminated on the local switches in the data centers. Once the FortiGates have booted, they do not form a cluster. The network operations inform you that CRC errors are present on the switches where the
FortiGates are connected.
What should you do to solve this problem?
  1. A
    Replace the cables where the CRC errors occur.
  2. B
    Change the ethertype for the HA packets.
  3. C
    Set the speed/duplex setting to 1 Gbps / Full Duplex.
  4. D
    Place the HA interfaces in dedicated VLANs.

Correct Answer:
A

Question #23
You cannot ping the FortiGate's default gateway 10.10.10.1 from the FortiGate CLI. The FortiGate's interface facing the default gateway is wan1 and its IP address is 10.10.10.254/24. During the initial troubleshooting tests, you confirmed that you can ping other IP addresses in the 10.10.10.0/24 subnet from the
FortiGate CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)
  1. A
    diagnose ip arp list
  2. B
    diag sniffer packet wan1 "˜arp and host 10.10.10.1'
  3. C
    diagnose hardware deviceinfo nic wan1
  4. D
    diagnose debug flow filter saddr 10.10.10.1 Diagnose debug flow trace start 10

Correct Answer:
AD

Question #24
You have deployed a FortiGate in NAT/Route mode as a Secure Web Gateway with a few IP-based authentication firewall policies. Your customer reports that some users now have different browsing permissions from what is expected. All these users are browsing using Internet Explorer through a Remote Desktop
Connection to a Terminal Server.
When you look at the FortiGate logs, the username for the Terminal Server IP is not consistent.
Which action will correct this problem?
  1. A
    Make sure the Terminal Server is using the correct DNS server.
  2. B
    Configure FSSO Advanced with LDAP integration.
  3. C
    Change the FSSO Polling mode to Windows NetAPI.
  4. D
    Install the TS/Citrix agent on the terminal server.

Correct Answer:
B

Question #25
Click the Exhibit button.
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.
Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)

  1. A
    Traffic that does not match any SPP policy will be inspected by this SPP.
  2. B
    FortiDDoS will not send a SYN/ACK if a SYN packet is coming from an IP address that is not in the legitimate IP (LIP) address table.
  3. C
    FortiDDoS will start dropping packets as soon as the traffic exceeds the configured minimum threshold.
  4. D
    SYN packets with payloads will be dropped.

Correct Answer:
AB

Previous Questions Next Questions

All Pages