Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

1. Refer to the exhibit.

You log into FortiManager, access the Device Manager window and notice that one of the managed devices is not in normal status.
Referring to the exhibit, which two statements correctly describe the status and result of the affected device? (Choose two.)

A) The changed configuration on the FortiGate will remain the next time that the device configuration is
pushed from FortiManager.
B) The changed configuration on the FortiGate will be overwritten in favor of what is on the FortiManager the next time that the device configuration is pushed.
C) The device configuration was changed on both the local FortiGate side and the FortiManager side; autoupdate is disabled.
D) The device configuration was changed on the local FortiGate side only; auto-update is disabled.

2. A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.
Which statement about creating the object LAN is correct?

A) Create a new object called LAN and use it as a variable on a TCL script.
B) Create a new object called LAN and promote it to the global database.
C) Create a new object called LAN and set meta-fields per remote site.
D) Create a new object called LAN and enable per-device mapping.

3. Exhibit

An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)

A) Synchronization
B) Graceful restart
C) EBGP multipath
D) BFD

4. Click the exhibit.
You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?

A) config system interface
edit Agg1
set lacp-mode active
end
B) config system interface
edit Agg1
set Algorithm L4
end
C) config system interface
edit Agg1
set min-links 2
end
D) config system interface
edit Agg1
set weight 2
end

5. You cannot the FortiGales default gateway 10.10.10 .1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan 1 and its IP address 10.10 .10 K74 During the troubleshooting, tests, you confirmed that you can plug other IP addresses in the 10.10.10. 0/24 subnet from the FortiGAte CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

A) diagnose hardware deviceinfo nic wan1
B) diagnose debug flow filter saddr 10.10.10.1
diagnose debug flow trace start 10
C) diagnose ip arp list
D) diag sniffer packet wan1 'arp and host 10.10.10.1'

Solutions: