最新的Fortinet NSE 8 - Recertification - NSE8_813免費考試真題
Which statements are correct properties of a partial mesh VPN deployment. (Choose two.)
正確答案: A,D
說明：（僅 Fast2test 成員可見）
Your colleague has enabled virtual clustering to load balance traffic between the cluster units.
You notice that all traffic is currently directed to a single FortiGate unit. Your colleague has applied the configuration shown in the exhibit.
Which step would you perform to load balance traffic within the virtual cluster?
You notice that all traffic is currently directed to a single FortiGate unit. Your colleague has applied the configuration shown in the exhibit.
Which step would you perform to load balance traffic within the virtual cluster?
正確答案: A
說明：（僅 Fast2test 成員可見）
An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the OCSP server.
Part of the FortiGate configuration is shown below:
Based on this configuration, which authentication scenario will FortiGate deny?
Part of the FortiGate configuration is shown below:
Based on this configuration, which authentication scenario will FortiGate deny?
正確答案: D
說明：（僅 Fast2test 成員可見）
Refer to the exhibit.
The FortiAP profile used by the FortiGate managed AP is shown in the exhibit.
Which two statements in this scenario are correct? (Choose two.)
The FortiAP profile used by the FortiGate managed AP is shown in the exhibit.
Which two statements in this scenario are correct? (Choose two.)
正確答案: A,C
The exhibit shows an LDAP server configuration on a FortiGate device.
The LDAP user, John Smith, has the following LDAP attributes:
John Smith's LDAP password is ABC123.
Which CLI command should you use to test the LDAP authentication using John Smith's credentials?
The LDAP user, John Smith, has the following LDAP attributes:
John Smith's LDAP password is ABC123.
Which CLI command should you use to test the LDAP authentication using John Smith's credentials?
正確答案: C
FortiMail is configured with the protected domain "internal.lab".
Which two envelope addresses will need an access control rule to relay e-mail sent for unauthenticated users? (Choose two.)
Which two envelope addresses will need an access control rule to relay e-mail sent for unauthenticated users? (Choose two.)
正確答案: A,D
A customer wants to integrate their on-premise FortiGate with their Azure infrastructure.
Which two components must be in place to configure the Azure Fabric connector? (Choose two.)
Which two components must be in place to configure the Azure Fabric connector? (Choose two.)
正確答案: A,B
Refer to the configuration snippet:
What will happen if you set the cp-accel-mode parameter to advanced? (Choose two.)
What will happen if you set the cp-accel-mode parameter to advanced? (Choose two.)
正確答案: A,B
說明：（僅 Fast2test 成員可見）
You notice that your FortiGate's memory usage is very high and that the unit's performance is adversely affected. You want to reduce memory usage.
Which three commands would meet this requirement? (Choose three.)
Which three commands would meet this requirement? (Choose three.)
正確答案: A,D,E
FortiGatel has a gateway-to-gateway IPsec VPN to FortiGate2. The entire IKE negotiation between FortiGatel and FortiGate2 is on UDP port 500. A PC on FortuGate2's local area network is sending continuous ping requests over the VPN tunnel to a PC of FortiGatel's local area network. No other traffic is sent over the tunnel.
Which statement is true on this scenario?
Which statement is true on this scenario?
正確答案: C
說明：（僅 Fast2test 成員可見）
Refer to the exhibit.
The Company Corp administrator has enabled Workflow mode in FortiManager and has assigned approval roles to the current administrators. However, workflow approval does not function as expected. The CTO is currently unable to approve submitted changes. Given the exhibit, which two possible solutions will resolve the workflow approval problems with the Workflow_72 ADOM?
(Choose two.)
The Company Corp administrator has enabled Workflow mode in FortiManager and has assigned approval roles to the current administrators. However, workflow approval does not function as expected. The CTO is currently unable to approve submitted changes. Given the exhibit, which two possible solutions will resolve the workflow approval problems with the Workflow_72 ADOM?
(Choose two.)
正確答案: A,C
說明：（僅 Fast2test 成員可見）
The SECOPS team in your company has started a new project to store all logging data in a disaster recovery center. All FortiGates will log to a secondary FortiAnalyzer and establish a TCP session to send logs to the syslog server.
Which two configurations will achieve this goal? (Choose two.)
Which two configurations will achieve this goal? (Choose two.)
正確答案: B,D