NSE8_811 sample questions

Question 1

A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.

Which statement about creating the object LAN is correct?

Accepted Answer

Create a new object called LAN and enable per-device mapping.

Answer

Create a new object called LAN and promote it to the global database.

Answer

Create a new object called LAN and use it as a variable on a TCL script.

Answer

Create a new object called LAN and set meta-fields per remote site.

Question 2

Refer to the exhibit.

A customer is using dynamic routing to exchange the default route between two FortiGate devices using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below.

According to the exhibit, what is causing the problem?

Accepted Answer

There is an OSPF interface network-type mismatch.

Answer

FG2 is within the wrong OSPF area.

Answer

OSPF requires the redistribution of connected networks.

Answer

A prefix for the default route is missing.

Question 3

A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.

• E-mails can only be accepted if a valid e-mail account exists.
• Only authenticated users can send e-mails out.

Which two actions will satisfy the requirements? (Choose two.)

Accepted Answer

Configure recipient address verification.

Accepted Answer

Configure access control rules.

Answer

Configure inbound recipient policies.

Answer

Configure outbound recipient policies.

Question 4

Refer to the exhibit.

You have deployed several perimeter FortiGate devices with internal segmentation FortiGate devices behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGate device only.

Which two actions will reduce the number of these log messages? (Choose two.)

Accepted Answer

Disable DNS events logging from FortiGate in the config log fortianalyzer filter section.

Accepted Answer

Configure the internal FortiGate devices to communicate to FortiGuard using port 8888.

Answer

Apply an application control profile to the perimeter FortiGate devices that does not inspect DNS traffic to the outbound firewall policy.

Answer

Remove DNS signatures from the IPS profile applied to the outbound firewall policy.

Question 5

A customer wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUI and to provide different levels of access for different types of employees.

Which three actions are required to provide the requested functionality? (Choose three.)

Accepted Answer

Create a wildcard administrator on the FortiGate.

Accepted Answer

Create multiple administrator profiles with matching RADIUS VSAs.

Accepted Answer

Enable accprofile-override in the CLI.

Answer

Enable radius-vdom-override in the CLI.

Answer

Set the RADIUS authentication type to MS-CHAPv2.

Question 6

Refer to the exhibit.

You created a custom health-check for your FortiWeb deployment.

Given the output shown in the exhibit, which statement is true?

Accepted Answer

The FortiWeb must receive an HTTP 200 response code from the server.

Answer

The FortiWeb must receive an RST packet from the server.

Answer

The FortiWeb must match the hash value of the page index.html.

Answer

The FortiWeb must receive an ICMP Echo Request from the server.

Top vendors

Top exams

Free NSE8_811 sample questions

A customer wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUI and to provide different levels of access for different types of employees. Which three actions are required to provide the requested functionality? (Choose three.)

Refer to the exhibit. You created a custom health-check for your FortiWeb deployment. Given the output shown in the exhibit, which statement is true?

6 more free samples are waiting