NSE8_813 by Fortinet Actual Free Exam Q&As

Question 1

Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)

A. Some locations are reached via a hub location. B. VPN tunnels are not configured between every single location. C. There are no hub locations in a partial mesh. D. VPN tunnels interconnect between every single location.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit. A customer has deployed a FortiGate 200F high-availability (HA) cluster that contains a TPM chip. The exhibit shows output from the FortiGate CLI session where the administrator enabled TPM.
Following these actions, the administrator immediately notices that both FortiGate high availability (HA) status and FortiManager status for the FortiGate are negatively impacted.
What are the two reasons for this behavior? (Choose two.)

A. The administrator needs to manually enter the hex private data encryption key in FortiManager. B. The private-data-encryption key entered on the primary did not match the value that the TPM expected. C. TPM functionality is not yet compatible with FortiGate HA. D. The FortiGate has not finished the auto-update process to synchronize the new configuration to FortiManager yet. E. Configuration for TPM is not synchronized between FortiGate HA cluster members.

Discussion 0

Correct Answer: A,E Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 3

Which two features are supported only by FortiMail but not by FortiGate? (Choose two.)

A. built-in MTA B. FortiGuard Antispam C. DNSBL D. end-to-end IBE encryption

Discussion 0

Correct Answer: A,D Vote an answer

Question 4

Refer to the exhibits.
GUI Access

Configuration

Topology

An administrator has configured a FortiGate and FortiAuthenticator for two-factor authentication with FortiToken push notifications for their SSL VPN login. Upon initial review of the setup, the administrator has discovered that the customers can manually type in their two-factor code and authenticate but push notifications.
Based on the information given in the exhibits, what must be done to fix this?

A. On FAC-1, the FortiToken public IP setting must point to 100.64.1.41. B. On FG-1 CLI, the ftm-push server setting must point to 100.64.1.41. C. On FG-1 port1, the ftm access protocol must be enabled. D. FAC-1 must have an internet routable IP address for push notifications.

Discussion 0

Correct Answer: A Vote an answer

Question 5

You are asked to implement a wireless network for a conference center and need to provision a high number of access points to support a large number of wireless client connections. Which statement describes a valid solution for this requirement?

A. Use a pre-shared key only for wireless client security.
Use the 5 GHz band only for greater security.
Use 802.11ac capable access points and configure channel bonding to support greater throughput for wireless clients. B. Use a captive portal for guest access.
Use both the 2.4 GHz and 5 GHz bands, and configure frequency steering.
Configure rogue access point detection in order to automatically control the transmit power of each AP. C. Use a captive portal for guest access.
Use both 2.4 GHz and 5 GHz bands.
Enable frequency and access point hand-off.
Use more channels, thereby supporting more clients. D. Use an open wireless network with no portal.
Use both 2.4 GHz and 5 GHz bands.
Use 802.11ac capable access points and configure channel bonding to support greater throughput for wireless clients.

Discussion 0

Correct Answer: C Vote an answer

Question 6

A customer would like to improve the performance of a FortiGate VM running in an Azure D4s_v3 instance, but they already purchased a BYOL VM04 license. Which two actions will improve performance the most without making a FortiGate license change? (Choose two.)

A. Enable SR-IOV on the FortiGate. B. Enable "Accelerated networking" on the Azure network interfaces. C. Migrate the FortiGate to an Azure D8s_v3. D. Migrate the FortiGate to an Azure F4s_v2.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 7

The exhibit shows an explicit Web proxy configuration in a FortiGate device. The FortiGate is installed between a client with the IP address 172.16.10.4 and a Web server using port 80 with the IP address 10.10.3.4. The client Web browser is properly sending HTTP traffic to the FortiGate Web proxy IP address 172.16.10.254.
Which two sniffer commands will capture this HTTP traffic? (Choose two.)

A. diagnose sniffer packet any 'host 172.16.10.4 and host 172.16.10.254' 3 B. diagnose sniffer packet any 'host 172.16.10.4 and port 8080' 3 C. diagnose sniffer packet any 'host 172.16.10.254 and host 10.10.3.4' 3 D. diagnose sniffer packet any 'host 172.16.10.4 and host 10.10.3.4' 3

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 8

A customer is operating a FortiWeb cluster in a high volume active-active HA group consisting of eight FortiWeb appliances. One of the secondary members is handling traffic for one specific VIP.
What will happen with the traffic if that secondary FortiWeb appliance fails?

A. Traffic will be redirected to the secondary member with the least number of sessions. B. Traffic will be redistributed by the primary appliance to the remaining secondary appliances. C. Traffic will be redistributed by the primary appliance to the remaining secondary appliances that are configured to handle traffic for that specific VIP. D. Traffic will be redirected to the next appliance in the same traffic group.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).

Question 9

A university is looking for a solution with the following requirements:
- wired and wireless connectivity
- authentication (LDAP)
- Web filtering, DLP and application control
- data base integration using LDAP to provide access to those students
who are up-to-date with their monthly payments
- support for an external captive portal
Which solution meets these requirements?

A. FortiGate for wireless controller FortiAP for wireless connectivity and captive portal FortiSwitch for PoE connectivity FortiAuthenticator for user authentication and REST API for DB integration FortiAnalyzer for log and reports B. FortiGate for wireless controller and captive portal FortiAP for wireless connectivity FortiAuthenticator for user authentication and REST API for DB integration FortiSwitch for PoE connectivity FortiAnalyzer for log and report C. FortiGate for wireless controller FortiAP for wireless connectivity FortiAuthenticator for user authentication, captive portal and REST API for DB integration FortiSwitch for PoE connectivity FortiAnalyzer for log and report D. FortiGate for wireless control and user authentication FortiAuthenticator for captive portal and REST API for DB integration FortiAP for wireless connectivity FortiSwitch for PoE connectivity FortiAnalyzer for log and report

Discussion 0

Correct Answer: B Vote an answer

Fortinet NSE 8 - Recertification - NSE8_813 Exam Practice Test