NSE8_811 sample questions

Question 1

Refer to the exhibit.

A customer is using dynamic routing to exchange the default route between two FortiGate devices using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below.

According to the exhibit, what is causing the problem?

Accepted Answer

There is an OSPF interface network-type mismatch.

Answer

FG2 is within the wrong OSPF area.

Answer

OSPF requires the redistribution of connected networks.

Answer

A prefix for the default route is missing.

Question 2

A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.

• E-mails can only be accepted if a valid e-mail account exists.
• Only authenticated users can send e-mails out.

Which two actions will satisfy the requirements? (Choose two.)

Accepted Answer

Configure recipient address verification.

Accepted Answer

Configure access control rules.

Answer

Configure inbound recipient policies.

Answer

Configure outbound recipient policies.

Question 3

Refer to the exhibit.

You have deployed several perimeter FortiGate devices with internal segmentation FortiGate devices behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGate device only.

Which two actions will reduce the number of these log messages? (Choose two.)

Accepted Answer

Disable DNS events logging from FortiGate in the config log fortianalyzer filter section.

Accepted Answer

Configure the internal FortiGate devices to communicate to FortiGuard using port 8888.

Answer

Apply an application control profile to the perimeter FortiGate devices that does not inspect DNS traffic to the outbound firewall policy.

Answer

Remove DNS signatures from the IPS profile applied to the outbound firewall policy.

Question 4

A customer wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUI and to provide different levels of access for different types of employees.

Which three actions are required to provide the requested functionality? (Choose three.)

Accepted Answer

Create a wildcard administrator on the FortiGate.

Accepted Answer

Create multiple administrator profiles with matching RADIUS VSAs.

Accepted Answer

Enable accprofile-override in the CLI.

Answer

Enable radius-vdom-override in the CLI.

Answer

Set the RADIUS authentication type to MS-CHAPv2.

Question 5

Refer to the exhibit.

You created a custom health-check for your FortiWeb deployment.

Given the output shown in the exhibit, which statement is true?

Accepted Answer

The FortiWeb must receive an HTTP 200 response code from the server.

Answer

The FortiWeb must receive an RST packet from the server.

Answer

The FortiWeb must match the hash value of the page index.html.

Answer

The FortiWeb must receive an ICMP Echo Request from the server.

Question 6

A legacy router has been replaced by a FortiGate device. The FortiGate has inherited the management IP address of the router and now the network administrator needs to remove the router from the FortiSIEM configuration.

Which two statements about this operation are true? (Choose two.)

Accepted Answer

FortiSIEM will move the router device into the Decommission folder.

Accepted Answer

FortiSIEM will discover a new device for the FortiGate with the same IP.

Answer

The router will be completely deleted from the FortiSIEM database.

Answer

By default, FortiSIEM can only parser event logs for FortiGate devices.

Free NSE8_811 sample questions

A customer wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUI and to provide different levels of access for different types of employees. Which three actions are required to provide the requested functionality? (Choose three.)

Refer to the exhibit. You created a custom health-check for your FortiWeb deployment. Given the output shown in the exhibit, which statement is true?

A legacy router has been replaced by a FortiGate device. The FortiGate has inherited the management IP address of the router and now the network administrator needs to remove the router from the FortiSIEM configuration. Which two statements about this operation are true? (Choose two.)

6 more free samples are waiting