Online Access Free NSE8_811 Exam Questions

A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.
Which statement about creating the object LAN is correct?

• A.Create a new object called LAN and enable per-device mapping.
• B.Create a new object called LAN and set meta-fields per remote site.
• C.Create a new object called LAN and use it as a variable on a TCL script.
• D.Create a new object called LAN and promote it to the global database.

Click the Exhibit button.

Referring to the exhibit, which two statements are true about local authentication? (Choose two.)

• A.The user will need to re-authenticate after five minutes.
• B.The user will be blocked 15 seconds after five login failures.
• C.The FortiGate will allow the TCP connection when a ClientHello message indicating a renegotiation is
  received.
• D.The user's IP address will be blocked 15 seconds after five login failures.

You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active - Passive FortinControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values:
config system ha
set mode dual
set password fortinetnse8
set group-id 5
set chassis-id 1
set minimize-chassis-failover enable
set hbdev "b1"
end
Both FortiControllers show Master status. What is the problem in this scenario?

• A.The management interface of both FotiControllers was connected on the some network.
• B.The chassis ID settings on FotiControllers on slot 2 should be set to 2.
• C.The b1 interface the two FortiConrollers do not see each other.
• D.The priority should be set higher for ForControllers on slot-1.

You want to access the JSON API on FortiManager to retrieve information on an object.
In this scenario, which two methods will satisfy the requirement? (Choose two.)

• A.Make a call with the curl utility on your workstation
• B.Make a call with the SoapUl API tool on your workstation.
• C.Download the WSDL file from FortiManager administration GUI.
• D.Make a call with the Web browser on your workstation.

In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied.
config load-balance session-setup
set tcp-ingress enable
end
When statement is true on how new TCP sessions are handled by the Distributor Processor (DP)?

• A.The new session added the DP session table is automatically deleted, if the traffic is denied by the processing worker.
• B.A new session added m the DP session table remains in the table remain in the traffic is denied by the procession worker.
• C.A new session added in the OP session table remains is the table only if traffic is traffic is accepted by the processing worker.
• D.No new session is added is the DP session table until the processing worker accepts the traffic.