당신은 온라인 연습 문제를 통해 Fortinet NSE8_811 시험지식에 대해 자신이 어떻게 알고 있는지 파악한 후 시험 참가 신청 여부를 결정할 수 있다.
시험을 100% 합격하고 시험 준비 시간을 35% 절약하기를 바라며 NSE8_811 덤프 (최신 실제 시험 문제)를 사용 선택하여 현재 최신 60개의 시험 문제와 답을 포함하십시오.
/ 1
Question No : 1
Refer to the exhibit.
Given the configuration shown in the exhibit, which two statements are true? (Choose two.)
A. LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802.3ad trunk on another device.
B. LAG-1 and LAG-2 should be connected to a 4-port single 802.3ad trunk on another device.
C. port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.
D. LAG-1 and LAG-2 should be connected to a single 4-port 802.3ad interface on the FortiGate-A.
정답: AC
Question No : 2
You are administering the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GUI of the blade located in logical slot 3 of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?
정답:
Question No : 3
Refer to the exhibit.
You configured AV and Web filtering for your outgoing Internet connections. You later notice that not all Web sessions are being inspected and you start troubleshooting the problem.
Referring to the exhibit, what can be causing this problem?
정답:
Question No : 4
A customer wants to enable SYN flood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet from a new source IP address.
Which SYN flood mitigation mode must the customer use?
정답:
Question No : 5
Refer to the exhibit.
A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time debug shows the output in the exhibit when site A is disconnected.
Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?
정답:
Question No : 6
Consider the following FortiGate configuration:
Which command-line option for deep inspection SSL would have the FortiGate re-sign all untrusted self-signed certificates with the trusted Fortinet_CA_SSL certificate?
정답:
Question No : 7
Refer to the exhibit.
A FortiGate device is configured to authenticate SSL VPN users using digital certificates. A partial FortiGate configuration is shown in the exhibit.
Referring to the exhibit, which two statements about this configuration are true? (Choose two.)
정답:
Question No : 8
Refer to the exhibit.
You created an aggregate interface between a FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds 1 Gbps and employees are reporting that the network is slow. After troubleshooting, you notice that only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?
A)
B)
C)
D)
정답:
Question No : 9
Refer to the exhibit.
You created a custom health-check for your FortiWeb deployment. Given the output shown in the exhibit, which statement is true?
정답:
Question No : 10
You want to access the JSON API on FortiManager to retrieve information on an object.
In this scenario, which two methods will satisfy the requirement? (Choose two.)
정답:
Question No : 11
You are building a FortiGate cluster which is stretched over two locations. The HA connections for the cluster are terminated on the local switches in the data centers. Once the FortiGate devices have booted, they do not form a cluster. The network operators inform you that CRC errors are present on the switches where the FortiGate devices are connected.
What should you do to solve this problem?
정답:
Question No : 12
You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?
정답:
Question No : 13
Refer to the exhibit.
The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb.
Which statement represents the purpose of this policy?
정답:
Question No : 14
You want to manage a FortiGate with the FortiCloud service. The FortiGate shows up in your list of devices on the FortiCloud Web site, but all management functions are either missing or grayed out.
Which statement is correct in this scenario?
정답:
Question No : 15
Refer to the exhibit.
The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices.
To deploy this configuration, two requirements must be met:
- 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
- The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)
