Choose NSE8_811 most accurate study material

Fortinet NSE8_811 Exam Overview:

Fortinet NSE8_811 Exam Syllabus Topics:

Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

Question 1

You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active - Passive FortinControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values:
config system ha
set mode dual
set password fortinetnse8
set group-id 5
set chassis-id 1
set minimize-chassis-failover enable
set hbdev "b1"
end
Both FortiControllers show Master status. What is the problem in this scenario?

A. The chassis ID settings on FotiControllers on slot 2 should be set to 2.
B. The b1 interface the two FortiConrollers do not see each other.
C. The priority should be set higher for ForControllers on slot-1.
D. The management interface of both FotiControllers was connected on the some network.

Question 2

Exhibit

The exhibit shows a topology where a FortiGate is two VDOMS, root and vd-vlasn. The root VDCM provides SSL-VPN access, where the users authenticated by a FortiAuthenticatator. The vd-lan VDOM provids internal access to a Web server. For the remote users to access the internal web server, there are a few requirements, which are shown below.
--At traffic must come from the SSI-VPN
--The vd-lan VDOM only allows authenticated traffic to the Web server.
-- Users must only authenticate once, using the SSL-VPN portal.
-- SSL-VPN uses RADIUS-based authentication.
referring to the exhibit, and the requirement describe above, which two statements are true?
(Choose two.)

A. root sends "RADIUS Accounting Messages" to FortiAuthenticator.
B. vd-lan connects to Fort authenticator as a regular FSSO client.
C. root is configured for FSSO while vd-lan is configuration for RSSO.
D. vd-lan authentication messages from root using FSSO.

Question 3

Click the Exhibit button.
Central NAT was configured on a FortiGate firewall. A sniffer shows ICMP packets out to a host on the Internet egresses with the port1 IP address instead of the virtual IP(VIP) that was configured.
Referring to the exhibit, which configuration will ensure that ICMP traffic is also translated?

A. config firewall central-snat-map edit 1 unset protocol next end
B. config firewall central-snat-map edit 1 set protocol 1 next end
C. config firewall central-snat-map edit 1 set orig-addr "all" next end
D. config firewall ippool edit "secondry_ip" set arp-intf 'port1' next end

Question 4

You have a customer experiencing problem with a legacy L3L4 firewall device and IPV6 SIP VoIP traffic. They devices is dropping SIP packets, consequently, it process SIP voice calls. Which solution would solve the customer's problem?

A. Replace their legacy device with a FortiGate and deploy a FortiVoice to extract information from the body of the IPv6 SIP packet.
B. Deploy a FortiVoice and enable an IPv6 SIP session helper.
C. Replace their legacy device with a FortiGate and configure it to extract information from the body of the
IPv6 SIP packet.
D. Deploy a FortiVoice and enable IPv6 SIP.

Question 5

You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?

A. https//192.168.1.99.44313
B. https//192.168.1.99.44323
C. https//192.168.1.99.44302
D. https//192.168.1.99.44322

Solutions: