Pay attention on Pass-king NSE8_811 Practice Materials, clear exam 100% for sure

Fortinet NSE8_811 Exam Syllabus Topics:

Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

1. Click the Exhibit button.

Click the Exhibit button.
A FortiGate with the default configuration is deployed between two IP phones. FortiGate receives the INVITE request shown in the exhibit form Phone A (internal)to Phone B (external). Which two actions are taken by the FortiGate after the packet is received? (Choose two.)

A) The phone A IP address will be translated for the WAN IP address in all INVITE header fields and the SDP statement remains intact.
B) a pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49l70 and 49171.
C) A pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49169 and 49170.
D) The phone A IP address will be translated lo the WAN IP address in all INVITE header fields and the m: field of the SDP statement.

2. A FortOS devices is used for termination of VPNs for number of remote spoke VPN units (designated group A spokes) using a phase 1 main mode dial-up tunnel using pre-shared. Your company recently acquired another organization. You are asked establish VPN correctively for the newly acquired organization's sites which new devices will be provisioned (designated Group B spokes). Both exiting (Group A) and new (Group B) spoke units are dynamically addressed. You are asked to ensure that spokes from the acquired organization (Group B) have different access permission than your existing VPN spokes (Group A).
Which two solutions meet the represents for the new spoke group? (Choose two.)

A) Implement separate phase 1 dial-up aggressive mode tunnels with a distinct peer ID.
B) Implement a new phase 1 dial-up main mode tunnel with certificate authentication.
C) Implement a new phase 1 dial-up main mode tunnel with a different pre-shared key than the Group A
spokes.
D) Implement a new phase 1 dial-up main mode tunnel with pre-shared keys and XAuth.

3. Exhibit
Click the Exhibit button.
You have deployed several perimeter FortiGates with internal segmentation FortiGates behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGates only.

Which two actions would reduce the number of these log messages? (Choose two.)

A) Apply an application control profile lo the perimeter FortiGates that does not inspect DNS traffic to the outbound firewall policy.
B) Remove DNS signature* <rom the IPS protte appfced to the outbound firewall policy.
C) Configure the internal ForbGates to communicate to ForpGuard using port 8888.
D) Disable DNS events logging horn ForirGate In the config log fortianalyser filter section.

4. Click the exhibit.
You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?

A) config system interface
edit Agg1
set min-links 2
end
B) config system interface
edit Agg1
set weight 2
end
C) config system interface
edit Agg1
set Algorithm L4
end
D) config system interface
edit Agg1
set lacp-mode active
end

5. Refer to the Exhibit button.
You need to run a script in FortiManager against managed FortiGate devices in your organization to install a configuration for a new static route. Which two scripts will successfully configure the static route on the managed device? (Choose two.)

A) Script 3
B) Script 2
C) Script 4
D) Script 1

Solutions: