Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

1. Refer to the exhibit.

The FortiAP profile used by the FortiGate managed AP is shown in the exhibit.
Which two statements in this scenario are correct? (Choose two.)

A) Interference will be prevented between FortiAP devices using this profile.
B) This profile will map specific SSIDs available to the FortiAP devices.
C) All FortiAP devices using this profile will have Radio 1 monitor wireless clients.
D) All FortiAP devices using this profile will have Radio 1 scan rogue access points.

2. Exhibit
Click the Exhibit button.
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.
Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)

A) Traffic that does match any spp policy will not be inspection by this spp.
B) FortiDooS will start dropping packets as soon as the traffic executed the configured maintain threshold.
C) FortiDDos will not send a SYNACK if a SYN packet is coming from an IP address that is not the legtimate IP (LIP) address table.
D) SYN packets with payloads will be drooped.

3. In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied.
config load-balance session-setup
set tcp-ingress enable
end
When statement is true on how new TCP sessions are handled by the Distributor Processor (DP)?

A) No new session is added is the DP session table until the processing worker accepts the traffic.
B) The new session added the DP session table is automatically deleted, if the traffic is denied by the processing worker.
C) A new session added m the DP session table remains in the table remain in the traffic is denied by the procession worker.
D) A new session added in the OP session table remains is the table only if traffic is traffic is accepted by the processing worker.

4. Exhibit

You created a custom health-check for your FortiWeb deployment.
Referring to the output shown in the exhibit, which statement is true?

A) The FortiWeb must match the hash value of the page index html.
B) The FortiWeb must receive an RST packet from the server.
C) The FortiWeb must receive an HTTP 200 response code from the server.
D) The FortiWeb must receive an ICMP Echo Request from the server.

5. Exhibit
Click the Exhibit button.
You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options. Referring to the exhibit, which statement is correct in this situation?

A) The FortiGate model being used does not support LAG.
B) The FortiGate model does not have an Integrated Switch Fabric (ISF).
C) The FortiGate interfaces are defective and require replacement.
D) The FortiGate SFP+ slot does not have the correct module.

Solutions: