Fortinet NSE8_811 Fortinet NSE 8 Written Exam (NSE8_811) Exam Practice Test

Page: 1 / 14
Total 65 questions

Question 1

Refer to the exhibit.

Click the Exhibit button.

A FortiGate with the default configuration is deployed between two IP phones. FortiGate receives the INVITE request shown in the exhibit form Phone A (internal)to Phone B (external). Which two actions are taken by the FortiGate after the packet is received? (Choose two.)

Answer : B, C

Question 2

Click the Exhibit button.

A customer has just finished their Azure deployment to secure a Web application behind a FortiGate and a FortiWeb. Now they want to add components to protect against advanced threats (zero day attacks), centrally manage the entire environment, and centrally monitor Fortinet and non-Fortinet products.

Which Fortinet solutions will satisfy these requirements?

Answer : C

Question 3

You configure an outgoing firewall policy with a web filter for accessing the internet. The access to URL https// and web belonging to the same category should be blocked. You notice that the Web server presents a certificate with CN=www The site is as '' information Technology and the site is categorized as ''Business".

Which statements is correct in this scenario?

Answer : D

Question 4

Refer to the Exhibit button.

You need to run a script in FortiManager against managed FortiGate devices in your organization to install a configuration for a new static route. Which two scripts will successfully configure the static route on the managed device? (Choose two.)

Answer : B, C

Question 5

You deploy a FortiGate device in a remote office based on the requirements shown below.

-- Due to company's security policy, management IP of your FortiGate is not allowed to access the Internet.

-- Apply Web Filtering, Antivirus, IPS and Application control to the protected subnet.

-- Be managed by a central FortiManager in the head office.

Which action will help to achieve the requirements?

Answer : B

Question 6

Click the Exhibit button.

config system ha

set mode a-a

set group-id 1

set group-name main

set hb_dev port2 100

set session-pickup enable


You have configured an HA cluster with two FortiGates. You want to make sure that you are able to manage the individual cluster members directly using port3.

Referring to the exhibit, what are two ways to accomplish this task? (Choose two.)

Answer : B, C

Question 7

An old router has been replaced by a FortiWAN device. The FortiWAN has inherited the router's management IP address and now the network administrator needs to remove the old router from the FortiSIEM configuration.

Which two statements are true about this operation? (Choose two.)

Answer : A, D

Page:    1 / 14   
Total 65 questions