NSE8_810 by Fortinet Valid Free Exam Practice Test

Question 1

Click the Exhibit button. An administrator implements a multi-chassis link aggregation (MCLAG) solution using two FortiSwitch 448Ds and one FortiGate 3700D. As describes in the network topology shown in the exhibit, two links are connected to each FortiSwitch. What is requires to implement this solution? (Choose two.)

A. a FortiGate with a hardware or a software switch B. an ICL link between both FortiSwitches C. a disabled FortiLink, split interface D. two Link aggregated (LAG) interfaces on the FortiGate side

Correct Answer: B,C

Question 2

Click the Exhibit button.
A FortiGate with the default configuration is deployed between two IP phones. FortiGate receives the INVITE request shown in the exhibit form Phone A (internal)to Phone B (external). Which two actions are taken by the FortiGate after the packet is received? (Choose two.)

A. The phone A IP address will be translated lo the WAN IP address in all INVITE header fields and the m: field of the SDP statement. B. A pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49169 and
49170. C. The phone A IP address will be translated for the WAN IP address in all INVITE header fields and the SDP statement remains intact. D. a pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49l70 and
49171.

Correct Answer: A,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

Click to the Exhibit button.
You need to apply the security features below to the network shown in the exhibit.
-high grade DDoS protection
-Web security and load balancing for Server1 and Server2
-Solution must be PCI DSS compliant
-Enhanced security to DNS 1 and DNS 2

What are three solutions for this scenario? (Choose three.)

A. FortiWeb forVDOM-A B. FortDDoS between FG1 and FG2 and the Internet C. FortiDDoS between FG1 and FG2 and VDOMs D. FortADC for VDoM-B E. FortiADC for VDOM-A

Correct Answer: A,B,D

Question 4

A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.
- E-mails can only be accepted if a valid e-mail account exists.
- Only authenticated users can send e-mails out
Which two actions will satisfy the requirements? (Choose two. )

A. Configure outbound recipient policies. B. Configure recipient address verification. C. Configure inbound recipient policies. D. Configure access control rules.

Correct Answer: B,D

Question 5

Click the Exhibit button.
Central NAT was configured on a FortiGate firewall. A sniffer shows ICMP packets out to a host on the Internet egresses with the port1 IP address instead of the virtual IP(VIP) that was configured.
Referring to the exhibit, which configuration will ensure that ICMP traffic is also translated?

A. config firewall ippool edit "secondry_ip" set arp-intf 'port1' next end B. config firewall central-snat-map edit 1 set protocol 1 next end C. config firewall central-snat-map edit 1 unset protocol next end D. config firewall central-snat-map edit 1 set orig-addr "all" next end

Correct Answer: C

Question 6

Click the Exhibit button.

You configured an IPsec tunnel to a branch office. Now you want to make sure that the encryption of the tunnel is offloaded to hardware.
Referring to the exhibit, which statement is true?

A. Traffic is not offloaded. B. Incoming and outgoing traffic is offloaded C. Outgoing traffic is offloaded: incoming traffic not offloaded. D. Outgoing traffic is offloaded, you cannot determine if incoming traffic is offloaded at this time.

Correct Answer: C

Fortinet Network Security Expert 8 Written Exam (NSE8 810) - NSE8_810 Exam Practice Test