NSE8_811無料問題集「Fortinet NSE 8 Written Exam (NSE8

質問 1

Click the Exhibit button.
Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMail as a high risk?

（A）The high-risk tile will go to the system quarantine.

（B）The high-risk file will be received by the recipient.

（C）The high-risk file will be discarded by malware/virus outbreak protection.

（D）The high-risk file will be discarded by attachment analysis.

正解：A 解答を投票する

質問 2

Exhibit
Click the Exhibit button.
You have deployed several perimeter FortiGates with internal segmentation FortiGates behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGates only.

Which two actions would reduce the number of these log messages? (Choose two.)

（A）Disable DNS events logging horn ForirGate In the config log fortianalyser filter section.

（B）Configure the internal ForbGates to communicate to ForpGuard using port 8888.

（C）Remove DNS signature* <rom the IPS protte appfced to the outbound firewall policy.

（D）Apply an application control profile lo the perimeter FortiGates that does not inspect DNS traffic to the outbound firewall policy.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit.

The FortiAP profile used by the FortiGate managed AP is shown in the exhibit.
Which two statements in this scenario are correct? (Choose two.)

（A）This profile will map specific SSIDs available to the FortiAP devices.

（B）Interference will be prevented between FortiAP devices using this profile.

（C）All FortiAP devices using this profile will have Radio 1 scan rogue access points.

（D）All FortiAP devices using this profile will have Radio 1 monitor wireless clients.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

You cannot the FortiGales default gateway 10.10.10 .1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan 1 and its IP address 10.10 .10 K74 During the troubleshooting, tests, you confirmed that you can plug other IP addresses in the 10.10.10. 0/24 subnet from the FortiGAte CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

（A）diagnose debug flow filter saddr 10.10.10.1
diagnose debug flow trace start 10

（B）diagnose ip arp list

（C）diag sniffer packet wan1 'arp and host 10.10.10.1'

（D）diagnose hardware deviceinfo nic wan1

正解：A、B 解答を投票する

質問 5

You are building a FortiGala cluster which is stretched over two locations. The HA connections for the cluster are terminated on the data centers. Once the FortiGates have booted, they do form a cluster. The network operators inform you that CRC eoors are present on the switches where the FortiGAtes are connected.
What would you do to solve this problem?

（A）Change the ethertype for the HA packets.

（B）Replace the caables where the CRC errors occur.

（C）Set the speedduplex setting to 1 Gbps /Full Duplex.

（D）Place the HA interfaces in dedicated VLANs.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?

（A）https//192.168.1.99.44302

（B）https//192.168.1.99.44323

（C）https//192.168.1.99.44322

（D）https//192.168.1.99.44313

正解：B 解答を投票する

NSE8_811 無料問題集「Fortinet NSE 8 Written Exam (NSE8_811)」

弊社を連絡する

関連リンク

トップ試験