Fortinet NSE8_811 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Advanced Security & Threat Prevention | 20% | - Advanced threat protection, zero-trust architecture - IPS, application control, web filtering - Logging, reporting, compliance design |
| Topic 2: SD-WAN & Wide Area Networking | 20% | - Hybrid WAN, internet/MPLS/5G integration - Security enforcement over SD-WAN - SD-WAN rule design, SLAs, load balancing |
| Topic 3: Advanced FortiGate Architecture & Deployment | 25% | - High Availability (FGCP/FGSP) & clustering - NPU offloading, performance tuning, kernel debugging - Advanced routing: BGP, OSPF, VRF, route redistribution - Complex NAT, IPsec VPN, SSL VPN design |
| Topic 4: Security Fabric & Multi-Product Integration | 25% | - FortiSandbox, FortiDDoS threat protection - FortiAuthenticator, FortiToken identity management - FortiSwitch, FortiAP secure access integration - FortiManager, FortiAnalyzer central management |
| Topic 5: Design & Troubleshooting for Complex Networks | 10% | - Diagnosis & resolution of complex issues - End-to-end secure network design |
Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:
1. Exhibit
You created a custom health-check for your FortiWeb deployment.
Referring to the output shown in the exhibit, which statement is true?
A) The FortiWeb must receive an ICMP Echo Request from the server.
B) The FortiWeb must match the hash value of the page index html.
C) The FortiWeb must receive an RST packet from the server.
D) The FortiWeb must receive an HTTP 200 response code from the server.
2. A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.
Which statement about creating the object LAN is correct?
A) Create a new object called LAN and use it as a variable on a TCL script.
B) Create a new object called LAN and promote it to the global database.
C) Create a new object called LAN and set meta-fields per remote site.
D) Create a new object called LAN and enable per-device mapping.
3. Click the Exhibit button. An administrator implements a multi-chassis link aggregation (MCLAG) solution using two FortiSwitch 448Ds and one FortiGate 3700D. As describes in the network topology shown in the exhibit, two links are connected to each FortiSwitch. What is requires to implement this solution? (Choose two.)
A) An ICL link between both FortiSwitch devices needs to be added.
B) Create two separate link aggregated (LAG) interfaces on the FortiGate side for each FortiSwitch.
C) Replace the FortiGate as this one does not have an ISF.
D) Add set fortilink-split-interface disable on the FortiLink interface.
4. Exhibit
Click the Exhibit button.
A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it.
However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.
Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?
A) set enforce-unique-id disable
B) set single-source disable
C) set add-router enable
D) set router-overlap allow
5. Click the Exhibit button.
Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMail as a high risk?
A) The high-risk file will be discarded by attachment analysis.
B) The high-risk file will be received by the recipient.
C) The high-risk file will be discarded by malware/virus outbreak protection.
D) The high-risk tile will go to the system quarantine.
Solutions:
| Question # 1 Answer: D | Question # 2 Answer: D | Question # 3 Answer: A,D | Question # 4 Answer: D | Question # 5 Answer: D |
1362 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
