Online Access Free NSE8 Exam Questions

A cafe offers free Wi-Fi. Customers' portable electronic devices often do not have antivirus software installed and may be hosting worms without their knowledge.
You must protect all customers from any other customers' infected devices that join the same SSID.
Which step meets the requirement?

• A.Use WPA2 encryption, and enable "Block lntra-SSID Traffic".
• B.Enable deep SSH inspection with antivirus and IPS.
• C.Use a captive portal to redirect unsecured connections such as HTTP and SMTP to their secured equivalents, preventing worms on infected clients from tampering with other customer traffic.
• D.Use WPA2 encryption and configure a policy on FortiGate to block all traffic between clients.

Which VPN protocol is supported by FortiGate units?

• A.DMVPN
• B.OpenVPN
• C.PPTP
• D.E-LAN

Your marketing department uncompressed and executed a file that the whole department received using
Skype.
Reviewing the exhibit, which two details do you determine frim your initial analysis if the payload?

• A.The payload contains strings that the malware is monitoring to harvest credentials.
• B.This threat payload is uploading private user videos which are then used to extort Bitcoin payments.
• C.This type of threat of a DDoS attack using instant messaging to send e-m ails to further spread the
  infection.
• D.This is a type of Trojan that will download and pirate movies using your Netflix credentials.

The exhibit shows an explicit Web proxy configuration in a FortiGate device. The FortiGate is installed
between a client with the IP address 172.16.10.4 and a Web server using port 80 with the IP address 10.10.3.4.
The client Web browser is properly sending HTTP traffic to the FortiGate Web proxy IP address 1 72.16.10.254.
Which two sniffer commands will capture this HTTP traffic? (Choose two.)

• A.diagnose sniffer packet any 'host 172.16.10.4 and host 10.10.3.4' 3
• B.diagnose sniffer packet any 'host 172.16.10.254 and host 10.10.3.4' 3
• C.diagnose sniffer packet any 'host 172.16.10.4 and port 8080' 3
• D.diagnose sniffer packet any 'host 172.16.10.4 and host 172.16.10.254' 3

Your security department has requested that you implement the OpenSSL TLS Heartbeat lnformation
disclosure signature using an IPS sensor to scan traffic destined to the FortiGate. You must log all
packets that attempt to exploit this vulnerability.
Referring to the exhibit, which two configurations are required to accomplish this task? (Choose two.)

A:

B:

C:

D:

• A.Option D
• B.Option B
• C.Option C
• D.Option A