Fortinet NSE8_811 Exam Syllabus Topics:
| Section | Objectives |
|---|---|
| Topic 1: Secure Network Design | - Enterprise architecture design using Fortinet Security Fabric
|
| Topic 2: Configuration and Implementation | - FortiGate configuration in complex environments
|
| Topic 3: Troubleshooting and Analysis | - Network and security issue diagnosis
|
| Topic 4: Security Operations and Integration | - Fortinet Security Fabric integration
|
Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:
Question #1
Refer to the exhibit.
You log into FortiManager, access the Device Manager window and notice that one of the managed devices is not in normal status.
Referring to the exhibit, which two statements correctly describe the status and result of the affected device? (Choose two.)
A. The changed configuration on the FortiGate will remain the next time that the device configuration is
pushed from FortiManager.
B. The changed configuration on the FortiGate will be overwritten in favor of what is on the FortiManager the next time that the device configuration is pushed.
C. The device configuration was changed on both the local FortiGate side and the FortiManager side; autoupdate is disabled.
D. The device configuration was changed on the local FortiGate side only; auto-update is disabled.
Question #2
A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.
Which statement about creating the object LAN is correct?
A. Create a new object called LAN and use it as a variable on a TCL script.
B. Create a new object called LAN and promote it to the global database.
C. Create a new object called LAN and set meta-fields per remote site.
D. Create a new object called LAN and enable per-device mapping.
Question #3
Exhibit
An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)
A. Synchronization
B. Graceful restart
C. EBGP multipath
D. BFD
Question #4
Click the exhibit.
You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?
A. config system interface
edit Agg1
set lacp-mode active
end
B. config system interface
edit Agg1
set Algorithm L4
end
C. config system interface
edit Agg1
set min-links 2
end
D. config system interface
edit Agg1
set weight 2
end
Question #5
You cannot the FortiGales default gateway 10.10.10 .1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan 1 and its IP address 10.10 .10 K74 During the troubleshooting, tests, you confirmed that you can plug other IP addresses in the 10.10.10. 0/24 subnet from the FortiGAte CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)
A. diagnose hardware deviceinfo nic wan1
B. diagnose debug flow filter saddr 10.10.10.1
diagnose debug flow trace start 10
C. diagnose ip arp list
D. diag sniffer packet wan1 'arp and host 10.10.10.1'
Solutions:
| Question #1 Answer: B,C | Question #2 Answer: D | Question #3 Answer: B,D | Question #4 Answer: B | Question #5 Answer: B,C |
1051 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
