Fortinet Network Security Expert 8 Written Exam (NSE8 801 - FortiOS 5.2) - NSE8 Exam Practice Test
You are hosting Web applications that must be PCI DSS compliant. The Web applications are protected
by a FortiWeb. Compliance will be tested during the quarterly security review.
In this scenario, which three FortiWeb features should you use? (Choose three.)
by a FortiWeb. Compliance will be tested during the quarterly security review.
In this scenario, which three FortiWeb features should you use? (Choose three.)
Correct Answer: B,D,E
Vote an answer
A customer just bought an additional FortiGate device and plans to use their existing load balancer to
distribute traffic across two FortiGate units participating network serving different neighbors. The
customer has mixed traffic of 1Pv4 and 1Pv6 TCP, UDP, and ICMP. The two FortiGate devices shown in
the exhibit should be redundant to each other so that the NAT session and active session tables will
synchronize and fail over to the unit that is still operating without any loss of data if one of the units fail.
Which high availability solution would you implement?
distribute traffic across two FortiGate units participating network serving different neighbors. The
customer has mixed traffic of 1Pv4 and 1Pv6 TCP, UDP, and ICMP. The two FortiGate devices shown in
the exhibit should be redundant to each other so that the NAT session and active session tables will
synchronize and fail over to the unit that is still operating without any loss of data if one of the units fail.
Which high availability solution would you implement?
Correct Answer: D
Vote an answer
The FortiGate is used as an IPsec gateway at a branch office. Two tunnels, tunA and tunB, are
established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is
1 0.1.1.0/24. The headquarters' subnet is 10.2.2.0/24. The desired usage for tunA and tunB has been
defined as follows:
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
-sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB
Which static routing configuration meets the requirements?
A:
B:
C:
D:
established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is
1 0.1.1.0/24. The headquarters' subnet is 10.2.2.0/24. The desired usage for tunA and tunB has been
defined as follows:
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
-sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB
Which static routing configuration meets the requirements?
A:
B:
C:
D:
Correct Answer: D
Vote an answer
FortiGatel has a gateway-to-gateway IPsec VPN to FortiGate2. The entire IKE negotiation between
FortiGatel and FortiGate2 is on UDP port 500. A PC on FortuGate2's local area network is sending
continuous ping requests over the VPN tunnel to a PC of FortiGatel's local area network. No other traffic is
sent over the tunnel.
Which statement is true on this scenario?
FortiGatel and FortiGate2 is on UDP port 500. A PC on FortuGate2's local area network is sending
continuous ping requests over the VPN tunnel to a PC of FortiGatel's local area network. No other traffic is
sent over the tunnel.
Which statement is true on this scenario?
Correct Answer: D
Vote an answer
You are managing a FortiAnalyzer appliance. After an upgrade, you notice that the unit no longer displays
historical logs, reports do not produce any data, and FortiView summary views are empty.
However, you notice that the unit is receiving logs on the dashboard widgets.
Which step resolves this problem?
historical logs, reports do not produce any data, and FortiView summary views are empty.
However, you notice that the unit is receiving logs on the dashboard widgets.
Which step resolves this problem?
Correct Answer: D
Vote an answer
You are investigating a problem related to FTP active mode.
You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file.
The FortiGate translates source address (SNAT) in network 10.100.60.0/24 to the IP address 172.16.133.1.
Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)
A:
B:
C:
D:
You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file.
The FortiGate translates source address (SNAT) in network 10.100.60.0/24 to the IP address 172.16.133.1.
Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)
A:
B:
C:
D:
Correct Answer: B
Vote an answer
Referring to the configuration shown on the exhibit, which three statements are true? (Choose three.)
Correct Answer: E
Vote an answer