Fortinet NSE8_811 Actual Tests : Fortinet NSE 8 Written Exam (NSE8_811)

Fortinet NSE8_811 Exam Syllabus Topics:

Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

1. Click the Exhibit button.

Referring to the exhibit, a FortiADC is load balancing IPv4 traffic between two next-hop routers. The FortiADC does not know the IP addresses of the servers. Also, the FortiADC is doing Layer 7 content inspection and modification.
In this scenario, which application delivery control is configured in the FortiADC?

A) Laye.4
B) Layer 7
C) Layer 2
D) Layer 3

2. A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.
Which statement about creating the object LAN is correct?

A) Create a new object called LAN and set meta-fields per remote site.
B) Create a new object called LAN and enable per-device mapping.
C) Create a new object called LAN and use it as a variable on a TCL script.
D) Create a new object called LAN and promote it to the global database.

3. A FortOS devices is used for termination of VPNs for number of remote spoke VPN units (designated group A spokes) using a phase 1 main mode dial-up tunnel using pre-shared. Your company recently acquired another organization. You are asked establish VPN correctively for the newly acquired organization's sites which new devices will be provisioned (designated Group B spokes). Both exiting (Group A) and new (Group B) spoke units are dynamically addressed. You are asked to ensure that spokes from the acquired organization (Group B) have different access permission than your existing VPN spokes (Group A).
Which two solutions meet the represents for the new spoke group? (Choose two.)

A) Implement separate phase 1 dial-up aggressive mode tunnels with a distinct peer ID.
B) Implement a new phase 1 dial-up main mode tunnel with pre-shared keys and XAuth.
C) Implement a new phase 1 dial-up main mode tunnel with certificate authentication.
D) Implement a new phase 1 dial-up main mode tunnel with a different pre-shared key than the Group A
spokes.

4. You have deployed a FortiGate In NAT/Route mode as a secure as a web gateway with a few P-base authentication firewall policies. Your customer reports that some users now have different browsing permission =s from what is expected. All these users are browsing using internet Explorer through Desktop Connection to a Terminal Server. When you took at the Fortigate logs the username for the Terminal Server IP is not consistent.
Which action will correct this problem?

A) Configure FSSO Advanced with LDAP integration
B) Change the FSSO polling mode to windows NetAPI
C) Install the TS/Citrix on the terminal server
D) Make sure Terminal Service is using the correct DNS ever.

5. Click the exhibit.
You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?

A) config system interface
edit Agg1
set Algorithm L4
end
B) config system interface
edit Agg1
set min-links 2
end
C) config system interface
edit Agg1
set lacp-mode active
end
D) config system interface
edit Agg1
set weight 2
end

Solutions: