Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Fortinet NSE8_811

Fortinet NSE8_811 Exam Practice Questions (P. 4)

  • Full Access (60 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #16
A customer wants to integrate their on-premise FortiGate with their Azure infrastructure.
Which two components must be in place to configure the Azure Fabric connector? (Choose two.)
  1. A
    FortiGate-VM virtual appliance deployed on-premise.
  2. B
    An inbound policy from the Azure FortiGate-VM virtual appliance.
  3. C
    An outbound policy from the Azure FortiGate-VM virtual appliance.
  4. D
    A FortiGate-VM virtual appliance deployed in Azure.

Correct Answer:
CD

Question #17
You cannot ping the FortiGate default gateway 10.10.10.1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan1 and its IP address is
10.10.10.254/24. During the initial troubleshooting tests, you confirm that you can ping other IP addresses in the 10.10.10.0/24 subnet from the FortiGate CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)
  1. A
    diagnose debug flow filter saddr 10.10.10.1 diagnose debug flow trace start 10
  2. B
    diagnose hardware deviceinfo nic wan1
  3. C
    diagnose ip arp list
  4. D
    diag sniffer packet wan1 'arp and host 10.10.10.1'

Correct Answer:
AC

Question #18
An organization has one central site and three remote sites. A FortiSIEM has been installed on the central site and now all devices across the remote sites must be centrally monitored by the FortiSIEM at the central site.
Which action will reduce the WAN usage by the monitoring system?
  1. A
    Enable SD-WAN FEC (Forward Error Correction) on the FortiGate at the remote site.
  2. B
    Install both Supervisor and Collector on each remote site.
  3. C
    Install local Collectors on each remote site.
  4. D
    Disable real-time log upload on the remote sites.

Correct Answer:
C

Question #19
A customer is looking for a way to remove javascripts, macros and hyperlinks from documents traversing the network without affecting the integrity of the content.
You propose to use the Content disarm and reconstruction (CDR) feature of the FortiGate.
Which two considerations are valid to implement CDR in this scenario? (Choose two.)
  1. A
    The inspection mode of the FortiGate is not relevant for CDR to operate.
  2. B
    CDR is supported on HTTPS, SMTPS, and IMAPS if deep inspection is enabled.
  3. C
    CDR can only be performed on Microsoft Office Document and PDF files.
  4. D
    Files processed by CDR can have the original copy quarantined on the FortiGate.

Correct Answer:
CD

Question #20
Refer to the exhibit.

As shown in the exhibit, a FortiADC is load-balancing IPv4 traffic between two next-hop routers. The FortiADC does not know the IP addresses of the servers.
Also, the FortiADC is doing Layer 7 content inspection and modification.
In this scenario, which application delivery control is configured in the FortiADC?
  1. A
    Layer 3
  2. B
    Layer 4
  3. C
    Layer 7
  4. D
    Layer 2

Correct Answer:
D

Previous Questions Next Questions

All Pages