NSE8_812問題集、Fortinet実際の試験問題

質問 1

You are running a diagnose command continuously as traffic flows through a platform with NP6 and you obtain the following output:

Given the information shown in the output, which two statements are true? (Choose two.)

A. Enable HPE shaper for the NP6 will change the output

B. The output is showing a packet descriptor queue accumulated counter

C. There are packet drops at the XAUI.

D. Host-shortcut mode is enabled.

E. Enabling bandwidth control between the ISF and the NP will change the output

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Refer to the exhibits, which show a firewall policy configuration and a network topology.

An administrator has configured an inbound SSL inspection profile on a FortiGate device (FG-1) that is protecting a data center hosting multiple web pages-Given the scenario shown in the exhibits, which certificate will FortiGate use to handle requests to xyz.com?

A. FortiGate will use the Fortinet_CA_Untrusted certificate for the untrusted connection,

B. FortiGate will fall-back to the default Fortinet_CA_SSL certificate.

C. FortiGate will use the first certificate in the server-cert list-the abc.com certificate

D. FortiGate will reject the connection since no certificate is defined.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 3

A remote IT Team is in the process of deploying a FortiGate in their lab. The closed environment has been configured to support zero-touch provisioning from the FortiManager, on the same network, via DHCP options. After waiting 15 minutes, they are reporting that the FortiGate received an IP address, but the zero- touch process failed.
The exhibit below shows what the IT Team provided while troubleshooting this issue:

Which statement explains why the FortiGate did not install its configuration from the FortiManager?

A. The FortiGate was not configured with the correct pre-shared key to connect to the FortiManager

B. The DHCP server used the incorrect option type for the FortiManager IP address.

C. The configuration was modified on the FortiGate prior to connecting to the FortiManager

D. The DHCP server was not configured with the FQDN of the FortiManager

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 4

You deployed a fully loaded FG-7121F in the data center and enabled sslvpn-load-balance. Based on the behavior of this feature which statement is correct?

A. To have better traffic distribution you should use IP pools that increment in multiples of 12.

B. If an FPM goes down, SSL VPN IP pool IP addresses will be re-allocated to the remaining FPMs.

C. Enabling SSL VPN load balancing will clear the session table.

D. You can use src-ip or dst-ip-dport on dp-load-distribution-method to make SSL VPN load balancing work as expected.

正解: C

質問 5

Refer to the exhibit.

A FortiWeb appliance is configured for load balancing web sessions to internal web servers. The Server Pool is configured as shown in the exhibit.
How will the sessions be load balanced between server 1 and server 2 during normal operation?

A. Server 1 will receive 25% of the sessions, Server 2 will receive 75% of the sessions

B. Server 1 will receive 0% of the sessions Server 2 will receive 100% of the sessions

C. Server 1 will receive 20% of the sessions, Server 2 will receive 66.6% of the sessions

D. Server 1 will receive 33.3% of the sessions, Server 2 will receive 66 6% of the sessions

正解: D

質問 6

You are deploying a FortiExtender (FEX) on a FortiGate-60F. The FEX will be managed by the FortiGate.
You anticipate high utilization. The requirement is to minimize the overhead on the device for WAN traffic.
Which action achieves the requirement in this scenario?

A. Enable CAPWAP connectivity between the FortiGate and the FortiExtender.

B. Add a switch between the FortiGate and FEX.

C. Change connectivity between the FortiGate and the FortiExtender to use VLAN Mode

D. Add a VLAN under the FEX-WAN interface on the FortiGate.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 7

Which two statements about bounce address tagging and verification (BATV) on FortiMail are true? (Choose two.)

A. BATV will use symmetric keys to verify the bounce address tag.

B. Emails with an empty sender address will be subjected to bounce verification.

C. FortiMail will insert the BATV tag to the sender address in the envelope.

D. You must publish the BATV public key as a DNS TXT record.

正解: B,C

Fortinet NSE 8 - Written Exam (NSE8_812) - NSE8_812 模擬練習