Winter Sale Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: v4s65

Note! Following NSE8_811 Exam is Retired now. Please select the alternative replacement for your Exam Certification. The new exam code is NSE8_812

NSE8_811 Exam Dumps - Fortinet NSE 8 Written Exam (NSE8_811)

Go to page:
Question # 4

Click the Exhibit button.

You configured an IPsec tunnel to a branch office. Now you want to make sure that the encryption of the tunnel is offloaded to hardware.

Referring to the exhibit, which statement is true?

A.

Incoming and outgoing traffic is offloaded

B.

Outgoing traffic is offloaded, you cannot determine if incoming traffic is offloaded at this time.

C.

Traffic is not offloaded.

D.

Outgoing traffic is offloaded: incoming traffic not offloaded.

Full Access
Question # 5

Exhibit

An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.

Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)

A.

EBGP multipath

B.

Graceful restart

C.

Synchronization

D.

BFD

Full Access
Question # 6

You cannot the FortiGales default gateway 10.10.10 .1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan 1 and its IP address 10.10 .10 K74 During the troubleshooting, tests, you confirmed that you can plug other IP addresses in the 10.10.10. 0/24 subnet from the FortiGAte CLI without packets lost.

Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

A.

diagnose debug flow filter saddr 10.10.10.1

diagnose debug flow trace start 10

B.

diagnose hardware deviceinfo nic wan1

C.

diagnose ip arp list

D.

diag sniffer packet wan1 'arp and host 10.10.10.1'

Full Access
Question # 7

Exhibit

Click the Exhibit button.

The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.

Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)

A.

Traffic that does match any spp policy will not be inspection by this spp.

B.

FortiDDos will not send a SYNACK if a SYN packet is coming from an IP address that is not the legtimate IP (LIP) address table.

C.

FortiDooS will start dropping packets as soon as the traffic executed the configured maintain threshold.

D.

SYN packets with payloads will be drooped.

Full Access
Question # 8

Click the Exhibit button.

What are two ways to establish communication between an existing NAT VDOM and a new transparent VDOM? (Choose two.)

A.

Set the set ip 10.10.10. i command to vlink2l.

B.

Set type ppp to the vdom-link, vlink2.

C.

Set the not ip 10.I0.I0.1 command to vlink20.

D.

Set type ethernet to the vdom-link, vlink2.

Full Access
Go to page: