Fortinet NSE 8 Written Exam (NSE8_811) 認定 NSE8_811 試験問題:

1. Exhibit

When deploying a new FortiGate-VMX Security node, an administrator received the error message shown in the exhibit
In this scenario, which statement is correct?

A) The FortiGate Service Manager does not have the proper permission to register the FortiGate-VMX
Service.
B) The vCenter is not able to locate the FortiGate-VMX OVF file.
C) The vCenter cannot connect to the FortiGate Service Manager.
D) The NSX Manager is not able to connect on the FortiGate Service Manager RestAPI service.

2. You want to manage a FortiCloud service. The FortiGate shows up in your list devices on the FortiCloud Web site, but all management functions are either missing or grayed out.
Which statement a correct in this scenario?

A) You must manually configure system control-management on the FortiGate CLI and set the management type to fortiguard.
B) The managed FortiGate requires that a FortiCloud management license be purchased and applied.
C) The management tunnel mode on the managed FortiGate must be changed to normal.
D) The managed FcrtGate a running a version of ForflOS that is either too new or too for FortCloud.

3. You cannot the FortiGales default gateway 10.10.10 .1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan 1 and its IP address 10.10 .10 K74 During the troubleshooting, tests, you confirmed that you can plug other IP addresses in the 10.10.10. 0/24 subnet from the FortiGAte CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

A) diagnose ip arp list
B) diagnose debug flow filter saddr 10.10.10.1
diagnose debug flow trace start 10
C) diagnose hardware deviceinfo nic wan1
D) diag sniffer packet wan1 'arp and host 10.10.10.1'

4. A customer wants to enable SYN Rood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet ftom a new source IP address. Which SYN packet from a new source IP address.
Which SYN flood mitigation mode must the customer use?

A) SYN/ACK cookie
B) SYN retransmission
C) ACK cookie
D) SYN cookie

5. Exhibit

You created a custom health-check for your FortiWeb deployment.
Referring to the output shown in the exhibit, which statement is true?

A) The FortiWeb must receive an ICMP Echo Request from the server.
B) The FortiWeb must match the hash value of the page index html.
C) The FortiWeb must receive an RST packet from the server.
D) The FortiWeb must receive an HTTP 200 response code from the server.

質問と回答：