Online Access Free Fortinet.NSE8_813.v2026-08-10.q108 Practice Test (Page 4)

NSE8_813 Exam Question 11

An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the Online Certificate Status Protocol (OCSP) server.
Part of the FortiGate configuration is shown below:

Based on this configuration, which statement is true?

A.If the OCSP response is CertStatus unknown, authentication will succeed if the certificate matches the CA.

B.If the OCSP server is unreachable, authentication will succeed if the certificate matches the CA.

C.OCSP checks will always go to the configured FortiAuthenticator.

D.The OCSP check of the certificate can be combined with a certificate revocation list.

NSE8_813 Exam Question 12

You must configure an environment with dual-homed servers connected to a pair of FortiSwitch units using an MCLAG.
Multicast traffic is expected in this environment, and should ensure unnecessary traffic is pruned from links that do not have a multicast listener.
In which two ways must you configure the igmps-flood-traffic and igmps-flood-report settings?
(Choose two.)

A.disable on ICL trunks

B.enable on ICL trunks

C.disable on the ISL and FortiLink trunks

D.enable on the ISL and FortiLink trunks

NSE8_813 Exam Question 13

Review the following FortiGate-6000 configuration excerpt:

Based on the configuration, which statement is correct regarding SNAT source port partitioning behavior?

A.It dynamically distributes SNAT source ports to operating FPCs or FPMs.

B.It is the default SNAT configuration and preserves active sessions when an FPC or FPM goes down.

C.It statically distributes SNAT source ports to operating FPCs or FPMs.

D.It equally distributes SNAT source ports across chassis slots.

NSE8_813 Exam Question 14

Refer to the exhibits, which show a firewall policy configuration and a network topology.
Configuration

Topology

An administrator has configured an inbound SSL inspection profile on a FortiGate device (FG-1) that is protecting a data center hosting multiple web pages.
Given the scenario shown in the exhibits, which certificate will FortiGate use to handle requests to xyz.com?

A.FortiGate will fall-back to the default Fortinet_CA_SSL certificate

B.FortiGate will reject the connection since no certificate is defined

C.FortiGate will use the Fortmet_CA_Untrusted certificate for the untrusted connection

D.FortiGate will use the first certificate in the server-cert list-the abc.com certificate

NSE8_813 Exam Question 15

A customer wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUI and to provide different levels of access for different types of employees.
Which three actions are required to provide the requested functionality? (Choose three.)

A.Enable accprofile-override in the CLI.

B.Set the RADIUS authentication type to MS-CHAPv2.

C.Enable radius-vdom-override in the CLI.

D.Create multiple administrator profiles with matching RADIUS VSAs.

E.Create a wildcard administrator on the FortiGate.

Latest Upload: 279ServiceNow.CAD.v2026-09-26.q145; 245GED.GED-Mathematical-Reasoning.v2026-09-26.q133; 163GAQM.Databricks-Certified-Data-Engineer-Associate.v2026-09-26.q79; 243CyberAB.CMMC-CCP.v2026-09-26.q110; 200Salesforce.AP-223.v2026-09-26.q69; 866ISACA.CISA.v2026-09-25.q633; 221VMware.250-605.v2026-09-25.q75; 364Microsoft.AZ-305.v2026-09-25.q198; 517IIA.IIA-CIA-Part1.v2026-09-25.q362; 201Huawei.H19-308_V4.0.v2026-09-24.q46

NSE8_813 Exam Question 11

NSE8_813 Exam Question 12

NSE8_813 Exam Question 13

NSE8_813 Exam Question 14

NSE8_813 Exam Question 15

Download PDF File