NSE8_811無料問題集「Fortinet NSE 8 Written Exam (NSE8

質問 1

A customer wants to enable SYN Rood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet ftom a new source IP address. Which SYN packet from a new source IP address.
Which SYN flood mitigation mode must the customer use?

（A）SYN/ACK cookie

（B）SYN retransmission

（C）ACK cookie

（D）SYN cookie

正解：D 解答を投票する

質問 2

Your client wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUL and provide different levels of access for different types of employees.
Which three actions required providing the requested functionality? (Choose three.)

（A）Create a wildcard administrator on the FortiGate.

（B）Enable accprofile-override in the CLI.

（C）Create multiple administrator profiles with matching RADIUS VSAs.

（D）Set the RADIUS authentication type to MS-CHAPv2.

（E）Enable radius-vdom-override in the CLI.

正解：A、B、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You have a customer experiencing problem with a legacy L3L4 firewall device and IPV6 SIP VoIP traffic. They devices is dropping SIP packets, consequently, it process SIP voice calls. Which solution would solve the customer's problem?

（A）Deploy a FortiVoice and enable IPv6 SIP.

（B）Replace their legacy device with a FortiGate and deploy a FortiVoice to extract information from the body of the IPv6 SIP packet.

（C）Replace their legacy device with a FortiGate and configure it to extract information from the body of the
IPv6 SIP packet.

（D）Deploy a FortiVoice and enable an IPv6 SIP session helper.

正解：B 解答を投票する

質問 4

You are building a FortiGala cluster which is stretched over two locations. The HA connections for the cluster are terminated on the data centers. Once the FortiGates have booted, they do form a cluster. The network operators inform you that CRC eoors are present on the switches where the FortiGAtes are connected.
What would you do to solve this problem?

（A）Change the ethertype for the HA packets.

（B）Replace the caables where the CRC errors occur.

（C）Set the speedduplex setting to 1 Gbps /Full Duplex.

（D）Place the HA interfaces in dedicated VLANs.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Refer to the Exhibit button.
You need to run a script in FortiManager against managed FortiGate devices in your organization to install a configuration for a new static route. Which two scripts will successfully configure the static route on the managed device? (Choose two.)

（A）Script 2

（B）Script 1

（C）Script 3

（D）Script 4

正解：A、C 解答を投票する

質問 6

Refer to the exhibit.

You are working on FortiGate 61E operating in flow-based inspection mode with various settings optimized for performance. The main Internet firewall policy is using the "default" antivirus profile. You found that some executable virus samples files downloaded over HTTP are not being blocked by the FortiGate.
Referring to the exhibit, how can this be fixed?

（A）Change the set scan-mode configuration to full.

（B）Add set content-disarm enable to the configuration.

（C）Disable the emulator feature.

（D）Change the set default-db configuration to extreme.

正解：A 解答を投票する

NSE8_811 無料問題集「Fortinet NSE 8 Written Exam (NSE8_811)」

弊社を連絡する

関連リンク

トップ試験