Study with NSE8_811 Actual Test Questions

Fortinet NSE8_811 Exam Overview:

Fortinet NSE8_811 Exam Syllabus Topics:

Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

1. Click the Exhibit button.

Click the Exhibit button.
A FortiGate with the default configuration is deployed between two IP phones. FortiGate receives the INVITE request shown in the exhibit form Phone A (internal)to Phone B (external). Which two actions are taken by the FortiGate after the packet is received? (Choose two.)

A) a pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49l70 and 49171.
B) The phone A IP address will be translated for the WAN IP address in all INVITE header fields and the SDP statement remains intact.
C) The phone A IP address will be translated lo the WAN IP address in all INVITE header fields and the m: field of the SDP statement.
D) A pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49169 and 49170.

2. Click the Exhibit button.

Only users authenticated in FortiGate-B can reach the server. A customer wants to deploy a single sign-on solution for IPsec VPN users. Once a user is connected and authenticated to the VPN in FortiGate-A, the user does not need to authenticate again in FortiGate -B to reach the server.
Which two actions satisfy this requirement? (Choose two.)

A) Use FortiAuthenticator.
B) Use the Collector Agent.
C) FortiGate-A must generate a RADUIS accounting packets.
D) Use Kerberos authentication.

3. Click the Exhibit button. An administrator implements a multi-chassis link aggregation (MCLAG) solution using two FortiSwitch 448Ds and one FortiGate 3700D. As describes in the network topology shown in the exhibit, two links are connected to each FortiSwitch. What is requires to implement this solution? (Choose two.)

A) An ICL link between both FortiSwitch devices needs to be added.
B) Create two separate link aggregated (LAG) interfaces on the FortiGate side for each FortiSwitch.
C) Replace the FortiGate as this one does not have an ISF.
D) Add set fortilink-split-interface disable on the FortiLink interface.

4. You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?

A) https//192.168.1.99.44302
B) https//192.168.1.99.44322
C) https//192.168.1.99.44313
D) https//192.168.1.99.44323

5. Your client wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUL and provide different levels of access for different types of employees.
Which three actions required providing the requested functionality? (Choose three.)

A) Enable radius-vdom-override in the CLI.
B) Create multiple administrator profiles with matching RADIUS VSAs.
C) Create a wildcard administrator on the FortiGate.
D) Set the RADIUS authentication type to MS-CHAPv2.
E) Enable accprofile-override in the CLI.

Solutions: