Online Access Free NSE8_811 Exam Questions

Refer to the exhibit.

The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
* 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
* The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)

• A.Configure the master FortiGate with one LAG and FortiLink split interface enabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
• B.Configure both FortiSwitch devices as peers with ISL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
• C.Configure the master FortiGate with one LAG and FortiLink split interface disabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
• D.Configure both FortiSwitch devices as peers with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.

You cannot the FortiGales default gateway 10.10.10 .1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan 1 and its IP address 10.10 .10 K74 During the troubleshooting, tests, you confirmed that you can plug other IP addresses in the 10.10.10. 0/24 subnet from the FortiGAte CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

• A.diag sniffer packet wan1 'arp and host 10.10.10.1'
• B.diagnose ip arp list
• C.diagnose debug flow filter saddr 10.10.10.1
  diagnose debug flow trace start 10
• D.diagnose hardware deviceinfo nic wan1

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

• A.LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802 3ad trunk on another device.
• B.LAG-1 and LAG 2 should be connected to a single 4-port 802 3ad interface on the FortiGate-A.
• C.LAG-1 and LAG-2 should be connected to a 4-port single 802 3ad trunk on another device.
• D.port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.

You have a customer experiencing problem with a legacy L3L4 firewall device and IPV6 SIP VoIP traffic. They devices is dropping SIP packets, consequently, it process SIP voice calls. Which solution would solve the customer's problem?

• A.Replace their legacy device with a FortiGate and deploy a FortiVoice to extract information from the body of the IPv6 SIP packet.
• B.Deploy a FortiVoice and enable IPv6 SIP.
• C.Deploy a FortiVoice and enable an IPv6 SIP session helper.
• D.Replace their legacy device with a FortiGate and configure it to extract information from the body of the
  IPv6 SIP packet.

Exhibit
Click the Exhibit button.
You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options. Referring to the exhibit, which statement is correct in this situation?

• A.The FortiGate model being used does not support LAG.
• B.The FortiGate SFP+ slot does not have the correct module.
• C.The FortiGate interfaces are defective and require replacement.
• D.The FortiGate model does not have an Integrated Switch Fabric (ISF).