最新的Fortinet Network Security Expert認證 NSE8_811考試題庫

問題1

Click the Exhibit button.

You configured an IPsec tunnel to a branch office. Now you want to make sure that the encryption of the tunnel is offloaded to hardware.
Referring to the exhibit, which statement is true?

A. Traffic is not offloaded.

B. Outgoing traffic is offloaded: incoming traffic not offloaded.

C. Outgoing traffic is offloaded, you cannot determine if incoming traffic is offloaded at this time.

D. Incoming and outgoing traffic is offloaded

正確答案: B

說明：（僅 VCESoft 成員可見）

問題2

A FortiGate with the default configuration shown below is deployed between two IP telephones. FortiGate receives the INVITE request shown in the exhibit from Phone A (internal) to Phone B (external).
NVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 10.31.101.20:5060
From: PhoneA <sip:[email protected]>
To: PhoneB <sip:[email protected]>
Call-ID: [email protected]
CSeq: 1 INVITE
Contact: sip:[email protected]
v=0
o=PhoneA 5462346 332134 IN IP4 10.31.101.20
c=IN IP4 10.31.101.20
m=audio 49170 RTP 0 3
Which two statements are correct after the FortiGate receives the packet? (Choose two.)

A. NAT takes place only in the SIP application layer.

B. A pinhole will be opened to accept traffic sent to the FortiGate WAN IP address.

C. NAT takes place at both the network and SIP application layers.

D. A pinhole is not required to accept traffic sent to the FortiGate WAN IP address.

正確答案: B,C

問題3

Exhibit

Click the Exhibit button. The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb. Which statement represents the purpose of this policy?

A. The pokey redirects only HTTP URLs containing theˆ/ ( .*)S string to HTTPS.

B. The policy redirects all HTTP URLs to HTTPS.

C. The policy redirects all HTTPS URLs to HTTP.

D. The policy redirects only HTTPS URLs containing the ˆ/ (. *) S string to HTTP.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題4

Click the Exhibit button. An administrator implements a multi-chassis link aggregation (MCLAG) solution using two FortiSwitch 448Ds and one FortiGate 3700D. As describes in the network topology shown in the exhibit, two links are connected to each FortiSwitch. What is requires to implement this solution? (Choose two.)

A. Create two separate link aggregated (LAG) interfaces on the FortiGate side for each FortiSwitch.

B. An ICL link between both FortiSwitch devices needs to be added.

C. Add set fortilink-split-interface disable on the FortiLink interface.

D. Replace the FortiGate as this one does not have an ISF.

正確答案: B,C

問題5

You are building a FortiGala cluster which is stretched over two locations. The HA connections for the cluster are terminated on the data centers. Once the FortiGates have booted, they do form a cluster. The network operators inform you that CRC eoors are present on the switches where the FortiGAtes are connected.
What would you do to solve this problem?

A. Change the ethertype for the HA packets.

B. Replace the caables where the CRC errors occur.

C. Set the speedduplex setting to 1 Gbps /Full Duplex.

D. Place the HA interfaces in dedicated VLANs.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題6

Exhibit
Click the Exhibit button.

A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it.
However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.
Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

A. set enforce-unique-id disable

B. set router-overlap allow

C. set single-source disable

D. set add-router enable

正確答案: B

說明：（僅 VCESoft 成員可見）

問題7

In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied.
config load-balance session-setup
set tcp-ingress enable
end
When statement is true on how new TCP sessions are handled by the Distributor Processor (DP)?

A. A new session added in the OP session table remains is the table only if traffic is traffic is accepted by the processing worker.

B. A new session added m the DP session table remains in the table remain in the traffic is denied by the procession worker.

C. The new session added the DP session table is automatically deleted, if the traffic is denied by the processing worker.

D. No new session is added is the DP session table until the processing worker accepts the traffic.

正確答案: B

最新的Fortinet NSE 8 Written Exam (NSE8_811) - NSE8_811免費考試真題

最新更新

站內鏈接

聯系我們