17 October, 2020

How Many Questions Of NSE8_810 Preparation

Cause all that matters here is passing the Fortinet NSE8_810 exam. Cause all that you need is a high score of NSE8_810 Fortinet Network Security Expert 8 Written Exam (810) exam. The only one thing you need to do is downloading Exambible NSE8_810 exam study guides now. We will not let you down with our money-back guarantee.

Fortinet NSE8_810 Free Dumps Questions Online, Read and Test Now.

Page: 1 / 5

Total 60 questions Full Exam Access

Question 1

Exhibit

Referring to the exhibit, which two statements are true? (Choose two.)

port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.

LAG-1 and LAG 2 should be connected to a single 4-port 802 3ad interface on the FortiGate-A.

LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802 3ad trunk on another device.

LAG-1 and LAG-2 should be connected to a 4-port single 802 3ad trunk on another devic

Question 2

Exhibit

You have installed a FortiSandbox and configured it in your FortiMail. Referring to the exhibit, which two statements are correct? (Choose two.)

FortiMail will cache the results for 30 minutes.

FortiMail will wait for 30 minutes to obtain the scan results.

If the FortiSandbox with IP 10.10 10 3 is not available, the e-mail will be checked by the FortiCloud Sandbox.

If FortiMail is not able to obtain the results from the fortiGuard quene

URls will not be checked by the FortiSandbox.

Question 3

Exhibit

What are two ways to establish communication between an existing NAT VDOM and a new transparent VDOM? (Choose two.)

Set the set ip 10.10.10. i command to vlink2l.

Set type ppp to the vdom-link, vlink2.

Set the not ip 10.I0.I0.1 command to vlink20.

Set type ethernet to the vdom-link, vlink2.

Question 4

Exhibit

Referring to the exhibit, which two statements are true about local authentication? (Choose two.)

The user will be blocked 15 seconds after five login failures.

When a ClientHello message indicating a renegotiation is received, the FortiGate will allow the TCP connection.

The user\'s IP address will be blocked 15 seconds after five login failures.

After five minutes, the user will need to re-authenticate.

Question 5

A FortOS devices is used for termination of VPNs for number of remote spoke VPN units (designated group A spokes) using a phase 1 main mode dial-up tunnel using pre-shared. Your company recently acquired another organization. You are asked establish VPN correctively for the newly acquired organization's sites which new devices will be provisioned (designated Group B spokes). Both exiting (Group A) and new (Group B) spoke units are dynamically addressed. You are asked to ensure that spokes from the acquired organization (Group B) have different access permission than your existing VPN spokes (Group A).
Which two solutions meet the represents for the new spoke group? (Choose two.)

implements a new phase 1 dial-up mode tunnel with preshared keys and XAut

Use identity to filter traffic.

Implement a new phase 1 dial-up main mode tunnel with a different pre-shared key than the Group A spoke

Use standard policies to filter for the new dial-up tunnel

Implement a new phase 1 dial-up main mode tunnel with certificate authenticatio

Use standard policies to filter for the dial-up tunnel.

Implement separate phase 1 dial-up aggressive mode tunnels with a distinct peer I

Use standard policies to filter traffic for the new dial-up tunnel.

Question 6

Exhibit

The exhibit shows the steps for creating a URL rewrite policy on a FortWet-Which statement represents the purpose of this policy?

The policy redirects all HTTP URLs to HTTPS.

The policy redirects all HTTPS URLs to HTTP.

The policy redirects only HTTPS URLs containing the ˆ/ (. *) S string to HTTP.

The pokey redirects only HTTP URLs containing theˆ/ ( .*)S string to HTTP

Question 7

Exhibit

You need to apply the security feature below to the network shown in the exhibit.
-- high grade DDoS protection
-- Web security and load balacng for Server 1 and Server
-- Solution must be PCI DSS compliant'
-- enhanced security to DNS 1 and DNS 2 What are three solutio for the scenario?

FortiWeb forVDOM-A

FortDDoS between FG1 and FG2 and the Internet

FortiADC for VDOM-A

FortADC for VDoM-B

FortiDDoS between FG1 and FG2 and VDOMs

Question 8

Exhibit

You ate trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options. Referring to the exhibit, which statement is correct in this situation?

The FortiGate model being used does not support LAG.

The FortiGate model does not have an Integrated Switch Fabric (ISF).

The FortiGate SFP+ slot does not have the correct module.

The FortiGate interfaces are defective and require replacemen

Question 9

You want to manage a FortiCloud service. The FortiGate shows up in your list devices on the FortiCloud Web site, but all management functions are either missing or grayed out.
Which statement a correct in this scenario?

The managed FcrtGate a running a version of ForflOS that is either too new or too for FortCloud.

The managed FortiGate requires that a FortiCloud management license be purchased and applied.

You must manually configure system control-management on the FortiGate CLI and set the management type to fortiguard.

The management tunnel mode on the managed FortiGate must be changed to norma

Question 10

You have a customer experiencing problem with a legacy L3L4 firewall device and IPV6 SIP VoIP traffic. They devices is dropping SIP packets, consequently, it process SIP voice calls. Which solution would solve the customer's problem?

Deploy a FortiVoice and enable IPv6 SIP.

Replace their legacy device with a FortiGate and configure it to extract information from the body of the IPv6 packet.

Deploy a FotiVoice and enable an IPv6 SIP session helper.

Replace their legacy device with a FortiGate and deploy a FortiVoice to extract information from the body of the IPv6 SIP packet

Question 11

Exhibit

You have configured an HA cluster with Two FortiGates You want to make sore that you are able to manage the individual duster members using ports3.
Referring to the exhibit, what are two ways to accomplish this task? (Choose two.)

Disable the sync feature on porl3: then configure specific IPs for ports on both cluster members.

Configure port3 to be a dedicated HA management interface, then configure specific IPs for port3 on both cluster members.

Create a management VDOM and Disable the HA synchronization for this VDOM, assign ports to this VDOM, then configure specific IPs for ports on both cluster member.

Allow administrative access in the HA heartbeat interface

Question 12

Exhibit

The exhibit shows a full-mesh topology between Fortigates FortiSwitches. To deploy configuration, two requirements must be met:
-- 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitches.
--the FortiGate HA must be in AP mode.
Referring to the exhibit, what are two actions that wil fulfill the requirements?

Configure both FortiSwitch as pears with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.

Configure the master FortiGate with one and FortiLink split interface disable on ports connected to cables A and C and make sure the same ports are used for to cables B and D.

Configure both FortiSwitches as peers ISL over cable on create one MCLAG on ports connected cables A and C, and ceate another MCLAG on ports connected to cables B and D.

Configure the master FortiGate with one LAG and FortiLink split interface enables on ports connected to cable A and C make sure the ports are used for cables B and D on the slave.

Question 13

Exhibit

Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMarf as a high risk?

The high-risk file will be discarded by attachment analysis.

The high-risk tile will go to the system quarantine.

The high-risk file will be received by the recipient.

The high-risk file will be discarded by malware/virus outbreak protectio

Question 14

Exhibit

You log into FortiManager, look at the Device Manager window and notice that one of you managed devices is not in normal status.
Referring to the exhibit, which two statements correctly describe the affected device's status and result? (Choose two.)

The device configuration was changed on the local FoitiGate side onl

auto-update is disabled.

The device configuration was changed on both the local FortiGate side and the FortiManager side, auto-update is disabled.

The changed configuration on the FortiGate wrt remain the next time that the device configuration is pushed from ForbManager.

The changed configuration on the FortiGate will be overwritten in favor of what is on the FortiMAnager the next time that the device configuration is pushed.

Question 15

Exhibit

You have deployed several perimeter FortiGates wilh terminal segmentation FortiGates befwid them All ForbGale devices are logging to Fortianaluzer. When you search the logs in FortiAnatyzer (or denied traffic,
you see numerous log messages, as shown in the exhibit, on your perimeter FortiGates only. Which two actions would reduce the number pt these log message? (Choose two)

Apply an application control profile lo the perimeter FortiGates that does not inspect DNS traffic to the outbound firewall policy.

Configure the internal ForbGates to communicate to ForpGuard using port 8888.

Disable DNS events logging horn ForirGate In the config log fortianalyser filter section.

Remove DNS signature* <rom the IPS protte appfced to the outbound firewall polic

Question 16

You cannot the FortiGales default gateway 10.10.10 .1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan 1 and its IP address 10.10 .10 K74 During the troubleshooting, tests, you confirmed that you can plug other IP addresses in the 10.10.10. 0/24 subnet from the FortiGAte CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

diagnose ip arp list

diag aniffer packet wan1 \'arp and host 10.10.1O.1\'

diagnose hardware deviceinfo nice wan1

diagnose debug flow filter addt 10.10.10.1

diagnose debug flow trace trace 10

Question 17

Exhibit

Your organization has a FortrGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features would be used to accomplish this task' (Choose two.)

Enable BFD

Enable EBGP multipath

Enable graceful restart

Enable synchronization

Question 18

Exhibit

Referring to the exhibit, which command-line option for deep inspection SSL would have the FortiGAte re=sign all untrusted self-signed certificates with the trusted Fortinet_CA_SSl certificate?

allow

block

ignore

inspect

Question 19

You deploy a FortiGate device in a remote office based on the requirements shown below.
-- Due to company's security policy, management IP of your FortiGate is not allowed to access the Internet.
-- Apply Web Filtering, Antivirus, IPS and Application control to the protected subnet.
-- Be managed by a central FortiManager in the head office. Which action will help to achieve the requirements?

Configure a default route and make sure that the FortiGate device can pmg to service fortiguard net.

Configure the FortiGuard override server and use the IP address of the FortiManager

Configure the FortiGuard override server and use the IP address of service, fortiguard net.

Configure FortiGate to use FortiGuard Filtering Port 8888.

Question 20

Exhibit

A customer gas just finished their Azure deployment to ensure a Web application behind a FortiWeb. Now they want to add components to protect against advance threats (zero day attacks), centrally the entire environment, and centrally monitor Fortinet and non-Fortinet products.
Which Fortinet will standby these requirements?

Use FotiAnalyzer lor monitor in Azure, FortiSlEM for managemnet, and FortiSandbox for zero day attacks on their local network.

Use Fortianalyzer for monitor Azure, FortiSiEM for management, and FortiGate has zero day attacks on their local network.

Use FortiManager for management in Azure, FortSIEM for monitoring and FcrtiSandbox for zero day attacks on their local network.

Use FortiSIEM for management Azure, FortiManager for management, and FortrGate for zero day attacks on their local network.

Question 21

FortiMail configured with the protected domain "internal lab".
Which two envelopes addresses will need an access control rule to relay e-mail sent for unauthenticated users? (Choose two.)

MAIL FROM: traming@fortinet com: RCPT TO: student@fortmet com

MAIL FROM student@fortinet com: RCPT TO student@internal.lab

MAIL FROM: trainmg@internallab; RCPT TO student@mternallab

MAIL FROM student@internal lab: RCPT TO student@fortmet.com

Page: 1 / 5

Total 60 questions Full Exam Access