Nach der Bezahlung geht es ohne Wartezeit los: Ihre NSE8_813 Lernmaterialien von Fast2test stehen sofort zum Download bereit und erreichen Sie zusätzlich innerhalb einer Minute per E-Mail. So starten Sie noch heute mit Ihrer Vorbereitung auf die Fortinet NSE 8 - Recertification.

Fortinet NSE8_813 Prüfungsübersicht:

Fortinet NSE8_813 Prüfungsthemen:

Ihre Fragen zur NSE8_813 Prüfung – kompakt beantwortet

Fortinet NSE 8 - Recertification NSE8_813 Prüfungsfragen mit Lösungen

Frage #1

Refer to the exhibit, which shows a VPN topology.

The device IP 10.1.100.40 downloads a file from the FTP server IP 192.168.4.50.
Referring to the exhibit, what will be the traffic flow behavior if ADVPN is configured in this environment?

A. ADVPN is not supported when spokes are behind NAT
B. All the session traffic will pass through the Hub
C. The TCP port 21 must be allowed on the NAT Device2
D. Spoke1 will establish an ADVPN shortcut to Spoke2

Frage #2

A university is looking for a solution with the following requirements:
- wired and wireless connectivity
- authentication (LDAP)
- Web filtering, DLP and application control
- data base integration using LDAP to provide access to those students
who are up-to-date with their monthly payments
- support for an external captive portal
Which solution meets these requirements?

A. FortiGate for wireless control and user authentication FortiAuthenticator for captive portal and REST API for DB integration FortiAP for wireless connectivity FortiSwitch for PoE connectivity FortiAnalyzer for log and report
B. FortiGate for wireless controller FortiAP for wireless connectivity and captive portal FortiSwitch for PoE connectivity FortiAuthenticator for user authentication and REST API for DB integration FortiAnalyzer for log and reports
C. FortiGate for wireless controller FortiAP for wireless connectivity FortiAuthenticator for user authentication, captive portal and REST API for DB integration FortiSwitch for PoE connectivity FortiAnalyzer for log and report
D. FortiGate for wireless controller and captive portal FortiAP for wireless connectivity FortiAuthenticator for user authentication and REST API for DB integration FortiSwitch for PoE connectivity FortiAnalyzer for log and report

Frage #3

Refer to the exhibit.

An HTTPS access proxy is configured to demonstrate its function as a reverse proxy on behalf of the web server it is protecting. It verifies user identity, device identity, and trust context, before granting access to the protected source. It is assumed that the FortiGate EMS fabric connector has already been successfully connected.
You need to ensure that ZTNA access through the FortiGate will redirect users to the FortiAuthenticator to perform username/password and multifactor authentication to validate access prior to accessing resources behind the FortiGate.
In this scenario, which two further steps need to be taken on the FortiGate? (Choose two.)

A. Create a SAML user/server object referring to the FortiAuthenticator.
B. Create an authentication rule that sets the sso-auth-method to the FortiAuthenticator.
C. Create a firewall rule that allows access from the remote endpoint to the resources behind the FortiGate.
D. Create an authentication scheme with the "method" as SAML.

Frage #4

A company wants to protect against Denial of Service attacks and has launched a new project.
They want to block the attacks that go above a certain threshold and for some others they are just trying to get a baseline of activity for those types of attacks so they are letting the traffic pass through without action.
Given the following:
- The interface to the Internet is on WAN1.
- There is no requirement to specify which addresses are being
protected or protected from.
- The protection is to extend to all services.
- The tcp_syn_flood attacks are to be recorded and blocked.
- The udp_flood attacks are to be recorded but not blocked.
- The tcp_syn_flood attack's threshold is to be changed from the
default to 1000.
The exhibit shows the current DoS-policy.
Which policy will implement the project requirements?

A.

B.

C.

D.

Frage #5

Refer to the exhibits.
Topology

Configuration

The exhibits show a FortiGate network topology and the output of the status of high availability on the FortiGate.
Given this information, which statement is correct?

A. The ethertype values of the HA packets are 0x8890, 0x8891, and 0x8892.
B. The cluster mode can support a maximum of four (4) FortiGate VMs.
C. The cluster members are on the same network and the IP addresses were statically assigned.
D. FGVMEVLQOG33WM3D and FGVMEVGCJNHFYI4A share a virtual MAC address.

Fragen und Antworten: