Fortinet Network Security Expert 8 Written Exam (NSE8 801 - FortiOS 5.2) - NSE8 FREE EXAM DUMPS QUESTIONS & ANSWERS
Which three configuration scenarios will result in an IPsec negotiation failure between two FortiGate
devices? (Choose three.)
devices? (Choose three.)
Correct Answer: A
Vote an answer
Which two features are supported only by FortiMail but not by FortiGate? (Choose two.)
Correct Answer: A,C
Vote an answer
How would you apply security to the network shown on the exhibit?
Correct Answer: C
Vote an answer
You are asked to design a secure solution using Fortinet products for a company. The company recently
has Web servers that were exploited and defaced. The customer has also experienced Denial or Service
due to SYN Flood attacks. Taking this into consideration, the customer's solution should have the
following requirements:
- management requires network-based content filtering with man-in-the-middle inspection
- the customer has no existing public key infrastructure but requires centralized certificate management
- users are tracked by their active directory username without installing any software on their hosts
- Web servers that have been exploited need to be protected from the OW ASP Top 10
- notification of high volume SYN Flood attacks when a threshold has been triggered
Which three solutions satisfy these requirements? (Choose three.)
has Web servers that were exploited and defaced. The customer has also experienced Denial or Service
due to SYN Flood attacks. Taking this into consideration, the customer's solution should have the
following requirements:
- management requires network-based content filtering with man-in-the-middle inspection
- the customer has no existing public key infrastructure but requires centralized certificate management
- users are tracked by their active directory username without installing any software on their hosts
- Web servers that have been exploited need to be protected from the OW ASP Top 10
- notification of high volume SYN Flood attacks when a threshold has been triggered
Which three solutions satisfy these requirements? (Choose three.)
Correct Answer: A,C,D
Vote an answer
A cafe offers free Wi-Fi. Customers' portable electronic devices often do not have antivirus software installed and may be hosting worms without their knowledge.
You must protect all customers from any other customers' infected devices that join the same SSID.
Which step meets the requirement?
You must protect all customers from any other customers' infected devices that join the same SSID.
Which step meets the requirement?
Correct Answer: C
Vote an answer
The FortiGate is used as an IPsec gateway at a branch office. Two tunnels, tunA and tunB, are
established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is
1 0.1.1.0/24. The headquarters' subnet is 10.2.2.0/24. The desired usage for tunA and tunB has been
defined as follows:
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
-sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB
Which static routing configuration meets the requirements?
A:
B:
C:
D:
established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is
1 0.1.1.0/24. The headquarters' subnet is 10.2.2.0/24. The desired usage for tunA and tunB has been
defined as follows:
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
-sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB
Which static routing configuration meets the requirements?
A:
B:
C:
D:
Correct Answer: C
Vote an answer
Which three statements about throughput on a wireless network are true? (Choose three.)
Correct Answer: C
Vote an answer