최신 NSE8_811 무료덤프 - Fortinet NSE 8 Written Exam (NSE8

문제1

Your client wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUL and provide different levels of access for different types of employees.
Which three actions required providing the requested functionality? (Choose three.)

A. Create multiple administrator profiles with matching RADIUS VSAs.

B. Enable accprofile-override in the CLI.

C. Create a wildcard administrator on the FortiGate.

D. Enable radius-vdom-override in the CLI.

E. Set the RADIUS authentication type to MS-CHAPv2.

정답: A,B,C

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Exhibit

When deploying a new FortiGate-VMX Security node, an administrator received the error message shown in the exhibit
In this scenario, which statement is correct?

A. The NSX Manager is not able to connect on the FortiGate Service Manager RestAPI service.

B. The vCenter is not able to locate the FortiGate-VMX OVF file.

C. The FortiGate Service Manager does not have the proper permission to register the FortiGate-VMX
Service.

D. The vCenter cannot connect to the FortiGate Service Manager.

정답: B

문제3

You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?

A. https//192.168.1.99.44322

B. https//192.168.1.99.44313

C. https//192.168.1.99.44323

D. https//192.168.1.99.44302

정답: C

문제4

A customer wants to integrate their on-premise FortiGate with their Azure infrastructure.
Which two components must be in place to configure the Azure Fabric connector? (Choose two.)

A. FortiGate-VM virtual appliance deployed on-premise.

B. An inbound policy from the Azure FortiGate-VM virtual appliance.

C. A FortiGate-VM virtual appliance deployed in Azure.

D. An outbound policy from the Azure FortiGate-VM virtual appliance.

정답: C,D

문제5

A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.
- E-mails can only be accepted if a valid e-mail account exists.
- Only authenticated users can send e-mails out
Which two actions will satisfy the requirements? (Choose two. )

A. Configure inbound recipient policies.

B. Configure access control rules.

C. Configure recipient address verification.

D. Configure outbound recipient policies.

정답: B,C

문제6

A customer has a SCADA environmental control device that is triggering a false-positive IPS alert whenever the Web GUI of the device is accessed. You cannot create a functional custom IPS filter to exempt this behavior, and it appears that the device is so old that it does not have HTTPS support. You need to prevent the false positive IPS alerts from occurring.
In this scenario, which two actions will accomplish this task? (Choose two.)

A. Change the relevant firewall policies to use SSL certificate-inspection instead of SSL deep-inspection.

B. Create a very specific firewall policy for that device IP address which does not perform IPS scanning.

C. Create a URL filter with the Exempt action for that device IP address.

D. Reconfigure the FortiGate to operate in proxy-based inspection mode instead of flow-based.

정답: B,C

최신 NSE8_811 무료덤프 - Fortinet NSE 8 Written Exam (NSE8_811)

우리와 연락하기

유용한 링크

최신 업데이트