최신Fortinet NSE 8 - Recertification - NSE8_813무료샘플문제
문제1
You have deployed two FortiGate devices as an HA pair. One FortiGate will process traffic while the other FortiGate is a standby. The standby monitors the primary for failure and only takes the role of processing traffic if it detects that the primary FortiGate has failed.
Which style of FortiGate HA does this scenario describe?
You have deployed two FortiGate devices as an HA pair. One FortiGate will process traffic while the other FortiGate is a standby. The standby monitors the primary for failure and only takes the role of processing traffic if it detects that the primary FortiGate has failed.
Which style of FortiGate HA does this scenario describe?
정답: B
문제2
Refer to the exhibit.
A customer reports that they are not able to reach subnet 10.10.10.0/24 from their FortiGate device. Based on the exhibit, what should you do to correct the situation?
Refer to the exhibit.
A customer reports that they are not able to reach subnet 10.10.10.0/24 from their FortiGate device. Based on the exhibit, what should you do to correct the situation?
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)
문제3
FortiGatel has a gateway-to-gateway IPsec VPN to FortiGate2. The entire IKE negotiation between FortiGatel and FortiGate2 is on UDP port 500. A PC on FortuGate2's local area network is sending continuous ping requests over the VPN tunnel to a PC of FortiGatel's local area network. No other traffic is sent over the tunnel.
Which statement is true on this scenario?
FortiGatel has a gateway-to-gateway IPsec VPN to FortiGate2. The entire IKE negotiation between FortiGatel and FortiGate2 is on UDP port 500. A PC on FortuGate2's local area network is sending continuous ping requests over the VPN tunnel to a PC of FortiGatel's local area network. No other traffic is sent over the tunnel.
Which statement is true on this scenario?
정답: D
설명: (KoreaDumps 회원만 볼 수 있음)
문제4
An HA topology is using the following configuration:
Based on this configuration, how long will it take for a failover to be detected by the secondary cluster member?
An HA topology is using the following configuration:
Based on this configuration, how long will it take for a failover to be detected by the secondary cluster member?
정답: D
설명: (KoreaDumps 회원만 볼 수 있음)
문제5
Which three statements about throughput on a wireless network are true? (Choose three.)
Which three statements about throughput on a wireless network are true? (Choose three.)
정답: A,D,E
설명: (KoreaDumps 회원만 볼 수 있음)
문제6
Refer to the exhibit.
A customer has deployed a FortiGate 300E with virtual domains (VDOMs) enabled in the multi- VDOM mode. There are three VDOMs: Root is for management and internet access, while VDOM 1 and VDOM 2 are used for segregating internal traffic. AccountVlnk and SalesVlnk are standard VDOM links in Ethernet mode.
Given the exhibit, which statement about VDOM behavior is correct?
Refer to the exhibit.
A customer has deployed a FortiGate 300E with virtual domains (VDOMs) enabled in the multi- VDOM mode. There are three VDOMs: Root is for management and internet access, while VDOM 1 and VDOM 2 are used for segregating internal traffic. AccountVlnk and SalesVlnk are standard VDOM links in Ethernet mode.
Given the exhibit, which statement about VDOM behavior is correct?
정답: A
설명: (KoreaDumps 회원만 볼 수 있음)
문제7
You want to use the MTA adapter feature on FortiSandbox in an HA-Cluster.
Which statement about this solution is true?
You want to use the MTA adapter feature on FortiSandbox in an HA-Cluster.
Which statement about this solution is true?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제8
An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the Online Certificate Status Protocol (OCSP) server.
Part of the FortiGate configuration is shown below:
Based on this configuration, which statement is true?
An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the Online Certificate Status Protocol (OCSP) server.
Part of the FortiGate configuration is shown below:
Based on this configuration, which statement is true?
정답: C
문제9
You deployed a fully loaded FG-7121F in the data center and enabled sslvpn-load-balance.
Based on the behavior of this feature which statement is correct?
You deployed a fully loaded FG-7121F in the data center and enabled sslvpn-load-balance.
Based on the behavior of this feature which statement is correct?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제10
Refer to the exhibit.
A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time debug shows the output in the exhibit when site A is disconnected.
Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?
Refer to the exhibit.
A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time debug shows the output in the exhibit when site A is disconnected.
Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?
정답: D
문제11
Refer to the exhibit. You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.
How should you create the SD-WAN zones?
Refer to the exhibit. You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.
How should you create the SD-WAN zones?
정답: B
문제12
A customer wants to use the FortiAuthenticator REST API to retrieve an SSO group called SalesGroup. The following API call is being made with the 'curl' utility:
Which statement correctly describes the expected behavior of the FortiAuthenticator REST API?
A customer wants to use the FortiAuthenticator REST API to retrieve an SSO group called SalesGroup. The following API call is being made with the 'curl' utility:
Which statement correctly describes the expected behavior of the FortiAuthenticator REST API?
정답: C
설명: (KoreaDumps 회원만 볼 수 있음)
문제13
Refer to the exhibit.
An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task?
(Choose two.)
Refer to the exhibit.
An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task?
(Choose two.)
정답: C,D
문제14
Which two features are supported only by FortiMail but not by FortiGate? (Choose two.)
Which two features are supported only by FortiMail but not by FortiGate? (Choose two.)
정답: A,B