There is no waiting for shipping with Fast2test. Once you pay, your NSE8_811 package for the Fortinet NSE 8 Written Exam (NSE8_811) lands in your inbox within a minute, ready to download and put to work the same evening.

Fortinet NSE8_811 Exam Overview:

Fortinet NSE8_811 Exam Syllabus Topics:

NSE8_811 Exam FAQ: What Candidates Ask About Fortinet NSE 8 Written Exam (NSE8_811)

Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

Question 1

Click the exhibit.
A VPN IPsec is connecting the headquarters office (HQ) with a branch office (BO) and OSPF is used to redistribute routes between the offices. After deployment, a server with IP address 10.10.10.35 located on the DMZ network of the BO FortiGate, was reported unreachable from hosts located on the LAN network of the same FortiGate.

Referring to the exhibit, which statement is true?

A. The incoming access list should have an accept action instead deny action to solve the problem.
B. Enabling NAT on the VPN firewall policy will solve the problem.
C. A directly connected subnet is being partially superseded by an OSPF redistributed subnet.
D. The ICMP packets are Being blocked by an implicit deny policy.

Question 2

Refer to the exhibit.

The FortiAP profile used by the FortiGate managed AP is shown in the exhibit.
Which two statements in this scenario are correct? (Choose two.)

A. Interference will be prevented between FortiAP devices using this profile.
B. All FortiAP devices using this profile will have Radio 1 scan rogue access points.
C. All FortiAP devices using this profile will have Radio 1 monitor wireless clients.
D. This profile will map specific SSIDs available to the FortiAP devices.

Question 3

Click the Exhibit button.
Central NAT was configured on a FortiGate firewall. A sniffer shows ICMP packets out to a host on the Internet egresses with the port1 IP address instead of the virtual IP(VIP) that was configured.
Referring to the exhibit, which configuration will ensure that ICMP traffic is also translated?

A. config firewall central-snat-map edit 1 unset protocol next end
B. config firewall central-snat-map edit 1 set orig-addr "all" next end
C. config firewall central-snat-map edit 1 set protocol 1 next end
D. config firewall ippool edit "secondry_ip" set arp-intf 'port1' next end

Question 4

Refer to the exhibit.

You log into FortiManager, access the Device Manager window and notice that one of the managed devices is not in normal status.
Referring to the exhibit, which two statements correctly describe the status and result of the affected device? (Choose two.)

A. The device configuration was changed on the local FortiGate side only; auto-update is disabled.
B. The changed configuration on the FortiGate will be overwritten in favor of what is on the FortiManager the next time that the device configuration is pushed.
C. The device configuration was changed on both the local FortiGate side and the FortiManager side; autoupdate is disabled.
D. The changed configuration on the FortiGate will remain the next time that the device configuration is
pushed from FortiManager.

Question 5

A customer is looking for a way to remove javascripts, macros and hyperlinks from documents traversing the network without affecting the integrity of the content. You propose to use the Content disarm and
reconstruction (CDR) feature of the FortiGate.
Which two considerations are valid to implement CDR in this scenario? (Choose two.)

A. Files processed by CDR can have the original copy quarantined on the FortiGate.
B. The inspection mode of the FortiGate is not relevant for CDR to operate.
C. CDR is supported on HTTPS, SMTPS, and IMAPS if deep inspection is enabled.
D. CDR can only be performed on Microsoft Office Document and PDF files.

Solutions: