最新的Fortinet NSE 8 - Recertification - NSE8_813免費考試真題
問題1
Which command syntax would you use to configure the serial number of a FortiGate as its host name?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題2
Referring to the diagram shown on the exhibit, you deployed VRRP load balancing using two FortiGate units and two VRRP groups with a VRRP virtual MAC address enabled on both FortiGate's port2 interface. During normal operation, both FortiGate units are processing traffic and the VRRP groups are used to load balance the traffic between the two FortiGate units.
If FortiGate unit A fails, what would happen?
If FortiGate unit A fails, what would happen?
正確答案: A
問題3
A FortiGate must be configured to accept VoIP traffic which will include session initiation protocol (SIP) traffic.
Which statement about the VoIP configuration options is correct?
Which statement about the VoIP configuration options is correct?
正確答案: C
問題4
A customer wants to install a FortiSandbox device to identify suspicious files received by an e- mail server. All the incoming e-mail traffic to the e-mail server uses the SMTPS protocol.
Which three solutions would be implemented? (Choose three.)
Which three solutions would be implemented? (Choose three.)
正確答案: B,C,D
問題5
Refer to the exhibits, which show a network topology and VPN configuration.
A network administrator has been tasked with modifying the existing dial-up IPsec VPN infrastructure to detect the path quality to the remote endpoints.
After applying the configuration shown in the configuration exhibit, the VPN clients can still connect and access the protected 172.16.205.0/24network, but no SLA information shows up for the client tunnels when issuing the diagnose sys link-monitor tunnel all command on the FortiGate CLI.
What is wrong with the configuration?
A network administrator has been tasked with modifying the existing dial-up IPsec VPN infrastructure to detect the path quality to the remote endpoints.
After applying the configuration shown in the configuration exhibit, the VPN clients can still connect and access the protected 172.16.205.0/24network, but no SLA information shows up for the client tunnels when issuing the diagnose sys link-monitor tunnel all command on the FortiGate CLI.
What is wrong with the configuration?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題6
A FortiGate deployment contains the following configuration:
What is the result of this configuration?
What is the result of this configuration?
正確答案: B
問題7
Consider the following FortiGate configuration:
Which command-line option for deep inspection SSL would have the FortiGate re-sign all untrusted self- signed certificates with the trusted Fortinet_CA_SSL certificate?
Which command-line option for deep inspection SSL would have the FortiGate re-sign all untrusted self- signed certificates with the trusted Fortinet_CA_SSL certificate?
正確答案: A
問題8
In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied.
Which statement is true on how new TCP sessions are handled by the Distributor Processor (DP)?
Which statement is true on how new TCP sessions are handled by the Distributor Processor (DP)?
正確答案: A
問題9
Refer to the exhibit.
The Company Corp administrator has enabled Workflow mode in FortiManager and has assigned approval roles to the current administrators. However, workflow approval does not function as expected. The CTO is currently unable to approve submitted changes. Given the exhibit, which two possible solutions will resolve the workflow approval problems with the Workflow_72 ADOM?
(Choose two.)
The Company Corp administrator has enabled Workflow mode in FortiManager and has assigned approval roles to the current administrators. However, workflow approval does not function as expected. The CTO is currently unable to approve submitted changes. Given the exhibit, which two possible solutions will resolve the workflow approval problems with the Workflow_72 ADOM?
(Choose two.)
正確答案: C,D
說明：（僅 VCESoft 成員可見）
問題10
Refer to the exhibit, which shows a Branch1 configuration and routing table.
In the SD-WAN implicit rule, you do not want the traffic load balance for the overlay interface when all members are available.
In this scenario, which configuration change will meet this requirement?
In the SD-WAN implicit rule, you do not want the traffic load balance for the overlay interface when all members are available.
In this scenario, which configuration change will meet this requirement?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題11
What is the benefit of using FortiGate NAC LAN Segments?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題12
Refer to the exhibit.
You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options.
Referring to the exhibit, which statement is correct in this situation?
You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options.
Referring to the exhibit, which statement is correct in this situation?
正確答案: B
問題13
Refer to the exhibit.
The exhibit shows a topology where a FortiGate is split into two VDOMs, rootand vd-lan. The rootVDOM provides external SSL-VPN access, where the users are authenticated by a FortiAuthenticator. The vd-lanVDOM provides internal access to a Web server.
For the remote users to access the internal Web server, there are a few requirements as follows:
* All traffic must come from the SSL-VPN.
* The vd-lanVDOM only allows authenticated traffic to the Web server.
* Users must only authenticate once, using the SSL-VPN portal.
* SSL-VPN uses RADIUS-based authentication.
Given these requirements and the topology shown in the exhibit, which two statements are true?
(Choose two.)
The exhibit shows a topology where a FortiGate is split into two VDOMs, rootand vd-lan. The rootVDOM provides external SSL-VPN access, where the users are authenticated by a FortiAuthenticator. The vd-lanVDOM provides internal access to a Web server.
For the remote users to access the internal Web server, there are a few requirements as follows:
* All traffic must come from the SSL-VPN.
* The vd-lanVDOM only allows authenticated traffic to the Web server.
* Users must only authenticate once, using the SSL-VPN portal.
* SSL-VPN uses RADIUS-based authentication.
Given these requirements and the topology shown in the exhibit, which two statements are true?
(Choose two.)
正確答案: B,D
