NSE8_811無料問題集「Fortinet NSE 8 Written Exam (NSE8

質問 1

Refer to the exhibit.

You have two data centers with a FortiGate 7000-series chassis connected by VPN. All traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN B.
The performance is lower than expected and you notice all traffic is only going through the FPM in slot 3 while nothing through the FPM in slot 4.
Referring to the exhibit, which statement is true?

（A）Removing traffic shaping from the firewall policy allowing this traffic will allow for load-balancing to the other module.

（B）Configuring a load-balance flow-rule in the CLI will load-balance this traffic.

（C）There is no way to load-balance the traffic in this scenario.

（D）Changing the algorithm to take source IP, destination IP and port into account will load balance this traffic to the other module.

正解：B 解答を投票する

質問 2

You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?

（A）https//192.168.1.99.44302

（B）https//192.168.1.99.44323

（C）https//192.168.1.99.44322

（D）https//192.168.1.99.44313

正解：B 解答を投票する

質問 3

A customer wants to enable SYN Rood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet ftom a new source IP address. Which SYN packet from a new source IP address.
Which SYN flood mitigation mode must the customer use?

（A）SYN/ACK cookie

（B）SYN retransmission

（C）ACK cookie

（D）SYN cookie

正解：D 解答を投票する

質問 4

Exhibit

An Administrator reports continuous high CPU utilization on a FortiGate device due to the IPS engine. The exhibit shows the global IPS configuration. Which two configuration actions will reduce the CPU usage? (Choose two.)

（A）Disable fail open.

（B）Change the algorithm to low.

（C）Reduce the number of packets logged.

（D）Enable intelligent mode.

正解：C、D 解答を投票する

質問 5

FortiMail configured with the protected domain "internal lab".
Which two envelopes addresses will need an access control rule to relay e-mail sent for unauthenticated users? (Choose two.)

（A）MAIL FROM student@internal lab: RCPT TO [email protected]

（B）MAIL FROM: trainmg@internallab; RCPT TO student@mternallab

（C）MAIL FROM: traming@fortinet com: RCPT TO: student@fortinet com

（D）MAIL FROM student@fortinet com: RCPT TO [email protected]

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Click the Exhibit button.

A customer has just finished their Azure deployment to secure a Web application behind a FortiGate and a FortiWeb. Now they want to add components to protect against advanced threats (zero day attacks), centrally manage the entire environment, and centrally monitor Fortinet and non-Fortinet products.
Which Fortinet solutions will satisfy these requirements?

（A）Use FortiManager for management in Azure, FortSIEM for monitoring and FcrtiSandbox for zero day attacks on their local network.

（B）Use FortiSIEM for management Azure, FortiManager for management, and FortrGate for zero day attacks on their local network.

（C）Use Fortianalyzer for monitor Azure, FortiSiEM for management, and FortiGate has zero day attacks on their local network.

（D）Use FotiAnalyzer lor monitor in Azure, FortiSlEM for managemnet, and FortiSandbox for zero day attacks on their local network.

正解：A 解答を投票する

NSE8_811 無料問題集「Fortinet NSE 8 Written Exam (NSE8_811)」

弊社を連絡する

関連リンク

トップ試験