NSE8_811試験無料問題集（65題）「Fortinet NSE 8 Written Exam (NSE8

出題：1

You configure an outgoing firewall policy with a web filter for accessing the internet. The access to URL https// itacm.co and web belonging to the same category should be blocked. You notice that the Web server presents a certificate with CN=www acme.com. The www.it.acme site is as '' information Technology and the www.acme.com site is categorized as ''Business".
Which statements is correct in this scenario?

A. Category "information Technology" needs to blocked, the FortiGate is able to inspection the URL with HTTPS sessions.

B. SSL inspection must be configured to deep-inspection: the category "information Technology "needs to be blocked.

C. Category "Business" need a to be block: the certificate name takes precedence over the SNI.

D. Category :information Technology" needs to be blocked, the SNI takes precedence over the certificate name.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Exhibit

An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)

A. Graceful restart

B. EBGP multipath

C. BFD

D. Synchronization

正解：A,C 解答を投票する

出題：3

Click the Exhibit button.

You configured an IPsec tunnel to a branch office. Now you want to make sure that the encryption of the tunnel is offloaded to hardware.
Referring to the exhibit, which statement is true?

A. Incoming and outgoing traffic is offloaded

B. Outgoing traffic is offloaded, you cannot determine if incoming traffic is offloaded at this time.

C. Outgoing traffic is offloaded: incoming traffic not offloaded.

D. Traffic is not offloaded.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?

A. https//192.168.1.99.44323

B. https//192.168.1.99.44302

C. https//192.168.1.99.44322

D. https//192.168.1.99.44313

正解：A 解答を投票する

出題：5

Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)

A. The Web traffic for nse8user is being filtered differently in IPv4 and IPv6.

B. The IPv4 traffic for nse8user is filtered using the DNS profile.

C. The IPv4 policy is allowing security profile groups.

D. The IPv6 traffic for nse8user is filtered using the DNS profile.

正解：B,D 解答を投票する

出題：6

Anti-Virus Real-Time Protection is enabled without any exclusions.
Referring to the exhibit, which two behaviors will the FortiClient endpoint have after receiving the profile update from the FortiClient EMS? (Choose two.)

A. If the Real-Time Protection does not detect a virus, the user will be able to access a downloaded file when the FortiSandbox is unreachable.

B. The user will not be able to access a downloaded file for a maximum of 60 seconds if it is not a virus and the FortiSandbox is reachable.

C. Access to a downloaded file will always be allowed after 60 seconds when the FortiSandbox is reachable.

D. Files executed from a mapped network drive will not be inspected by the FortiClient endpoint AntiVirus
engine.

正解：A,B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Click the Exhibit button.
You configured AV and Web filtering for your outgoing Internet connections. You later noticed that not all Web sessions are being inspected and you start troubleshooting the problem.
Referring to the exhibit, what would cause this problem?

A. These are problem with the connection to the Web filter servers, therefore the Web session cannot be categorized.

B. The Web session is using QUIC which a not inspected by the FortiGate

C. Web filtering is not licensed, therefore no inspection occurs.

D. The SSL inspection options are not set to inspection

正解：B 解答を投票する

NSE8_811試験無料問題集「Fortinet NSE 8 Written Exam (NSE8_811) 認定」