Fortinet NSE8_811 Exam Practice Questions (P. 1)
- Full Access (60 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #1
Refer to the exhibit.

The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
"¢ 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
"¢ The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)

The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
"¢ 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
"¢ The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)
- AConfigure the master FortiGate with one LAG and FortiLink split interface disabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
- BConfigure the master FortiGate with one LAG and FortiLink split interface enabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
- CConfigure both FortiSwitch devices as peers with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
- DConfigure both FortiSwitch devices as peers with ISL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
Correct Answer:
AC
AC
send
light_mode
delete
Question #2
You want to manage a FortiGate with the FortiCloud service. The FortiGate shows up in your list of devices on the FortiCloud Web site, but all management functions are either missing or grayed out.
Which statement is correct in this scenario?
Which statement is correct in this scenario?
- AThe management tunnel mode on the managed FortiGate must be changed to normal.
- BThe managed FortiGate is running a version of FortiOS that is either too new or too old for FortiCloud.
- CThe managed FortiGate requires that a FortiCloud management license be purchased and applied.Most Voted
- DYou must manually configure system central-management on the FortiGate CLI and set the management type to fortiguard.
Correct Answer:
D
D
send
light_mode
delete
Question #3
Refer to the exhibit.

The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb.
Which statement represents the purpose of this policy?

The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb.
Which statement represents the purpose of this policy?
- AThe policy redirects all HTTPS URLs to HTTP.
- BThe policy redirects all HTTP URLs to HTTPS.Most Voted
- CThe policy redirects only HTTP URLs containing the ^/(.*)$ string to HTTPS.
- DThe policy redirects only HTTPS URLs containing the ^/(.*)$ string to HTTP.
Correct Answer:
B
B
send
light_mode
delete
Question #4
You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?
Which prevention mode on FortiDDoS will protect you against this specific type of attack?
- Aasymmetric mode
- Baggressive aging mode
- Crate limiting mode
- Dblocking mode
Correct Answer:
B
B
send
light_mode
delete
Question #5
You are building a FortiGate cluster which is stretched over two locations. The HA connections for the cluster are terminated on the local switches in the data centers. Once the FortiGate devices have booted, they do not form a cluster. The network operators inform you that CRC errors are present on the switches where the FortiGate devices are connected.
What should you do to solve this problem?
What should you do to solve this problem?
- ASet the speed/duplex setting to 1 Gbps / Full Duplex.
- BReplace the cables where the CRC errors occur.
- CPlace the HA interfaces in dedicated VLANs.
- DChange the ethertype for the HA packets.
Correct Answer:
D
D
send
light_mode
delete
All Pages