100% Fortinet NSE8_813 Guaranteed Success With Testing Engine

Fortinet NSE 8 - Recertification Sample Questions:

1. You must create a High Availability deployment with two FortiWebs in Amazon Web Services (AWS); each on different Availability Zones (AZ) from the same region. At the same time, each FortiWeb should be able to deliver content from the Web servers of both of the AZs.
Which deployment would fulfill this requirement?

A) Use AWS Elastic Load Balancer (ELB) for both the FortiWebs in standalone mode and the internal Web servers in an ELB sandwich.
B) Configure the FortiWebs in Active-Active HA mode and use AWS Elastic Load Balancer (ELB) for the internal Web servers.
C) Use AWS Route 53 to load balance the FortiWebs in standalone mode and use AWS Virtual Private Cloud (VPC) Peering to load balance the internal Web servers.
D) Configure the FortiWebs in Active-Active HA mode and use AWS Route 53 to load balance the internal Web servers.

2. You must analyze an event that happened at 20:37 UTC.

One log relevant to the event is extracted from FortiGate logs:
The devices and the administrator are all located in different time zones Daylight savings time (DST) is disabled.
- The FortiGate is at GMT-10:00
- The FortiAnalyzer is at GMT-08:00
- Your browser local time zone is at GMT-03:00
You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?

A) 12:37:08
B) 10:37:08
C) 17:37:08
D) 20:37:08

3. There is an interface-mode IPsec tunnel configured between FortiGate1 and FortiGate2.
You want to run OSPF over the IPsec tunnel. On both FortiGates. the IPsec tunnel is based on physical interface Port1. Port1 has the default MTU setting on both FortiGate units.
Which statement is true about this scenario?

A) An IP address must be assigned to the IPsec interface on FortiGate1 and FortiGate2.
B) A multicast firewall policy must be added on FortiGate1 and FortiGate2 to allow protocol 89.
C) The MTU must be set manually on the IPsec interface.
D) The MTU must be set manually in the OSPF interface configuration.

4. You are asked to implement a wireless network for a conference center and need to provision a high number of access points to support a large number of wireless client connections. Which statement describes a valid solution for this requirement?

A) Use a pre-shared key only for wireless client security.
Use the 5 GHz band only for greater security.
Use 802.11ac capable access points and configure channel bonding to support greater throughput for wireless clients.
B) Use a captive portal for guest access.
Use both 2.4 GHz and 5 GHz bands.
Enable frequency and access point hand-off.
Use more channels, thereby supporting more clients.
C) Use an open wireless network with no portal.
Use both 2.4 GHz and 5 GHz bands.
Use 802.11ac capable access points and configure channel bonding to support greater throughput for wireless clients.
D) Use a captive portal for guest access.
Use both the 2.4 GHz and 5 GHz bands, and configure frequency steering.
Configure rogue access point detection in order to automatically control the transmit power of each AP.

5. Refer to the exhibit.

You need to apply the security features listed below to the network shown in the exhibit.
* High grade DDoS protection
* Web security and load balancing for Server 1 and Server 2
* Solution must be PCI DSS compliant
* Enhanced security to DNS 1 and DNS 2
What are three solutions for this scenario? (Choose three.)

A) FortiADC for VDOM-B
B) FortiADC for VDOM-A
C) FortiDDoS between FG1 and FG2 and VDOMs
D) FortiWeb for VDOM-A
E) FortiDDoS between FG1 and FG2 and the Internet

Solutions: