最新のNSE8_811問題集で試験を準備する

Fortinet NSE8_811 試験概要:

Fortinet NSE8_811 試験シラバストピック:

Fortinet NSE 8 Written Exam (NSE8_811) 認定 NSE8_811 試験問題：

1. Exhibit

An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)

A) Graceful restart
B) Synchronization
C) EBGP multipath
D) BFD

2. Click the Exhibit button.

Click the Exhibit button.
A FortiGate with the default configuration is deployed between two IP phones. FortiGate receives the INVITE request shown in the exhibit form Phone A (internal)to Phone B (external). Which two actions are taken by the FortiGate after the packet is received? (Choose two.)

A) a pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49l70 and 49171.
B) The phone A IP address will be translated lo the WAN IP address in all INVITE header fields and the m: field of the SDP statement.
C) The phone A IP address will be translated for the WAN IP address in all INVITE header fields and the SDP statement remains intact.
D) A pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49169 and 49170.

3. A FortiGate with the default configuration shown below is deployed between two IP telephones. FortiGate receives the INVITE request shown in the exhibit from Phone A (internal) to Phone B (external).
NVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 10.31.101.20:5060
From: PhoneA <sip:[email protected]>
To: PhoneB <sip:[email protected]>
Call-ID: [email protected]
CSeq: 1 INVITE
Contact: sip:[email protected]
v=0
o=PhoneA 5462346 332134 IN IP4 10.31.101.20
c=IN IP4 10.31.101.20
m=audio 49170 RTP 0 3
Which two statements are correct after the FortiGate receives the packet? (Choose two.)

A) NAT takes place only in the SIP application layer.
B) NAT takes place at both the network and SIP application layers.
C) A pinhole is not required to accept traffic sent to the FortiGate WAN IP address.
D) A pinhole will be opened to accept traffic sent to the FortiGate WAN IP address.

4. Click the Exhibit button.
Your customer is using dynamic routing to exchange the default route between two FortiGates using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below:

According to the exhibit, what is causing the problem?

A) FG2 is within the wrong OSPF area.
B) There is an OSPF interface network-type mismatch.
C) A prefix for the detail route is missing
D) OSPF requires the redistribution of connected networks.

5. You must create a high Availability deployment with two FortiWebs in Amazon Services (AWS): each on different Availability Zones(AZ) from the same region. At the same time, each FortiWeb should be able to deliver content from the Web server of both of the AZs. Which deployment would will this requirement?

A) Configure the FortiWebs Active-Active Ha mode and use AWS Router 53 load Router balance the internal Web servers.
B) Use AWS Elastic load Balancer (ELB) for both FortiWebs in standdone mode and the internal Web servers in an ELB sandwich.
C) Use AWS Router 53 to load balance FortiWebs in standone mode and use AWS Virtual private Cloud (VPC) peering to load balance the internal Web servers.
D) Configure the FortiWebs in Active-Active HA mode and use AWS Elastic load Balancer (ELB) for the internal Web servers.

質問と回答：