最新的Fortinet Network Security Expert 8 Written Exam (NSE8 801 - FortiOS 5.2) - NSE8免費考試真題
You are asked to implement a wireless network for a conference center and need to provision a high
number of access points to support a large number of wireless client connections.
Which statement describes a valid solution for this requirement?
number of access points to support a large number of wireless client connections.
Which statement describes a valid solution for this requirement?
正確答案: A
You are investigating a problem related to FTP active mode.
You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file.
The FortiGate translates source address (SNAT) in network 10.100.60.0/24 to the IP address 172.16.133.1.
Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)
A:
B:
C:
D:
You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file.
The FortiGate translates source address (SNAT) in network 10.100.60.0/24 to the IP address 172.16.133.1.
Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)
A:
B:
C:
D:
正確答案: D
Which three configuration scenarios will result in an IPsec negotiation failure between two FortiGate
devices? (Choose three.)
devices? (Choose three.)
正確答案: A
You have deployed two FortiGate devices as an HA pair. One FortiGate will process traffic while the other
FortiGate is a standby. The standby monitors the primary for failure and only takes the role of processing
traffic if it detects that the primary FortiGate has failed.
Which style of FortiGate HA does this scenario describe?
FortiGate is a standby. The standby monitors the primary for failure and only takes the role of processing
traffic if it detects that the primary FortiGate has failed.
Which style of FortiGate HA does this scenario describe?
正確答案: A
A company wants to protect against Denial of Service attacks and has launched a new project.
They want to block the attacks that go above a certain threshold and for some others they are just trying to get a
baseline of activity for those types of attacks so they are letting the traffic pass through without action.
Given the following:
-The interface to the Internet is on WAN1.
-There is no requirement to specify which addresses are being protected or protected from.
-The protection is to extend to all services.
-The tcp_syn_flood attacks are to be recorded and blocked.
-The udp_flood attacks are to be recorded but not blocked.
-The tcp_syn_flood attack's threshold is to be changed from the default to 1000.
The exhibit shows the current DoS-policy.
Which policy will implement the project requirements?
A:
B:
C:
D:
They want to block the attacks that go above a certain threshold and for some others they are just trying to get a
baseline of activity for those types of attacks so they are letting the traffic pass through without action.
Given the following:
-The interface to the Internet is on WAN1.
-There is no requirement to specify which addresses are being protected or protected from.
-The protection is to extend to all services.
-The tcp_syn_flood attacks are to be recorded and blocked.
-The udp_flood attacks are to be recorded but not blocked.
-The tcp_syn_flood attack's threshold is to be changed from the default to 1000.
The exhibit shows the current DoS-policy.
Which policy will implement the project requirements?
A:
B:
C:
D:
正確答案: A,B
FortiGatel has a gateway-to-gateway IPsec VPN to FortiGate2. The entire IKE negotiation between
FortiGatel and FortiGate2 is on UDP port 500. A PC on FortuGate2's local area network is sending
continuous ping requests over the VPN tunnel to a PC of FortiGatel's local area network. No other traffic is
sent over the tunnel.
Which statement is true on this scenario?
FortiGatel and FortiGate2 is on UDP port 500. A PC on FortuGate2's local area network is sending
continuous ping requests over the VPN tunnel to a PC of FortiGatel's local area network. No other traffic is
sent over the tunnel.
Which statement is true on this scenario?
正確答案: B
The SECOPS team in your company has started a new project to store all logging data in a disaster
recovery center. All FortiGates will log to a secondary FortiAnalyzer and establish a TCP session to send
logs to the syslog server.
Which two configurations will achieve this goal? (Choose two.)
A:
B:
C:
D:
recovery center. All FortiGates will log to a secondary FortiAnalyzer and establish a TCP session to send
logs to the syslog server.
Which two configurations will achieve this goal? (Choose two.)
A:
B:
C:
D:
正確答案: C,D