Fortinet NSE8_811 Exam Practice Questions (P. 2)
- Full Access (60 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #6
You want to access the JSON API on FortiManager to retrieve information on an object.
In this scenario, which two methods will satisfy the requirement? (Choose two.)
In this scenario, which two methods will satisfy the requirement? (Choose two.)
- ADownload the WSDL file from FortiManager administration GUI.
- BMake a call with the curl utility on your workstation.Most Voted
- CMake a call with the SoapUI API tool on your workstation.
- DMake a call with the Web browser on your workstation.Most Voted
Correct Answer:
AC
AC
send
light_mode
delete
Question #7
Refer to the exhibit.

You created a custom health-check for your FortiWeb deployment.
Given the output shown in the exhibit, which statement is true?

You created a custom health-check for your FortiWeb deployment.
Given the output shown in the exhibit, which statement is true?
- AThe FortiWeb must receive an RST packet from the server.
- BThe FortiWeb must receive an HTTP 200 response code from the server.Most Voted
- CThe FortiWeb must match the hash value of the page index.html.
- DThe FortiWeb must receive an ICMP Echo Request from the server.
Correct Answer:
B
B
send
light_mode
delete
Question #8
Refer to the exhibit.

You created an aggregate interface between a FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds 1 Gbps and employees are reporting that the network is slow. After troubleshooting, you notice that only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?
A.

B.

C.

D.


You created an aggregate interface between a FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds 1 Gbps and employees are reporting that the network is slow. After troubleshooting, you notice that only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?
A.

B.

C.

D.

send
light_mode
delete
Question #9
Refer to the exhibit.

A FortiGate device is configured to authenticate SSL VPN users using digital certificates. A partial FortiGate configuration is shown in the exhibit.
Referring to the exhibit, which two statements about this configuration are true? (Choose two.)

A FortiGate device is configured to authenticate SSL VPN users using digital certificates. A partial FortiGate configuration is shown in the exhibit.
Referring to the exhibit, which two statements about this configuration are true? (Choose two.)
- AThe authentication will fail if the user certificate does not contain the user principal name (UPN) information.Most Voted
- BThe authentication will fail if the user certificate does not contain the CA_Cert string in the CA field.
- CThe authentication will fail if the OCSP server is down.Most Voted
- DOCSP is used to verify that the user-signed certificate has not expired.
Correct Answer:
AC
AC
send
light_mode
delete
Question #10
Consider the following FortiGate configuration:

Which command-line option for deep inspection SSL would have the FortiGate re-sign all untrusted self-signed certificates with the trusted Fortinet_CA_SSL certificate?

Which command-line option for deep inspection SSL would have the FortiGate re-sign all untrusted self-signed certificates with the trusted Fortinet_CA_SSL certificate?
send
light_mode
delete
All Pages