NSE8_812試験無料問題集（107題）「Fortinet NSE 8

出題：1

You are troubleshooting a FortiMail Cloud service integrated with Office 365 where outgoing emails are not reaching the recipients' mail What are two possible reasons for this problem? (Choose two.)

A. A Mail Flow connector from the Exchange Admin Center has not been set properly to the FortiMail Cloud FQDN.

B. The FortiMail DKIM key was not set using the Auto Generation option.

C. The FortiMail access control rule to relay from Office 365 servers FQDN is missing.

D. The FortiMail access control rules to relay from Office 365 servers public IPs are missing.

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Refer to the exhibit.

A customer is trying to setup a Playbook automation using a FortiAnalyzer, FortiWeb and FortiGate. The intention is to have the FortiGate quarantine any source of SQL Injection detected by the FortiWeb. They got the automation stitch to trigger on the FortiGate when simulating an attack to their website, but the quarantine object was created with the IP 0.0.0.0. Referring to the configuration and logs in the exhibits, which two statements are true? (Choose two.)

A. The FortiAnalyzer ADOM Type must be Fabric.

B. The Group By option in the handler should be different to src, so src can be used on the Playbook configuration.

C. To diagnose this issue, you need to use the command diagnose test application oftpd 22.

D. FortiSOC Playbooks combining FortiWeb and FortiGate are not supported.

E. To fix the issue the parameter for script on the Playbook configuration should be epip.

正解：A,B 解答を投票する

出題：3

On a FortiGate Configured in Transparent mode, which configuration option allows you to control Multicast traffic passing through the?

A. Option D

B. Option C

C. Option A

D. Option B

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

You are performing a packet capture on a FortiGate 2600F with the hyperscale licensing installed. You need to display on screen all egress/ingress packets from the port16 interface that have been offloaded to the NP7.
Which three commands need to be run? (Choose three.)

A. diagnose sniffer packet npudbg

B. diagnose npu sniffer filter selector 0

C. diagnose npu sniffer filter intf port16

D. diagnose npu sniffer filter dir 2

E. diagnose sniffer packet port16

正解：A,C,D 解答を投票する

出題：5

Refer to the exhibit, which shows a Branch1 configuration and routing table.

In the SD-WAN implicit rule, you do not want the traffic load balance for the overlay interface when all members are available.
In this scenario, which configuration change will meet this requirement?

A. Change the load-balance-mode to source-ip-based.

B. Create a new static route with the internet sdwan-zone only

C. Configure the priority in each overlay member to 10.

D. Configure the cost in each overlay member to 10.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Which feature must you enable on the BGP neighbors to accomplish this goal?

A. Deterministic-med

B. Graceful-restart

C. Soft-reconfiguration

D. Synchronization

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Refer to the exhibit showing an SD-WAN configuration.

According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?

A. port1 and port15

B. port16 and port1

C. port16 and port15

D. port1 and port1

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

A customer would like to improve the performance of a FortiGate VM running in an Azure D4s_v3 instance, but they already purchased a BYOL VM04 license.
Which two actions will improve performance the most without making a FortiGate license change? (Choose two.)

A. Enable SR-IOV on the FortiGate.

B. Migrate the FortiGate to an Azure D8s_v3.

C. Enable "Accelerated networking" on the Azure network interfaces.

D. Migrate the FortiGate to an Azure F4s_v2.

正解：C,D 解答を投票する

出題：9

Refer to the exhibit showing the history logs from a FortiMail device.

Which FortiMail email security feature can an administrator enable to treat these emails as spam?

A. DKIM validation in a session profile

B. Impersonation analysis in an antispam profile

C. Sender domain validation in a session profile

D. Soft fail SPF validation in an antispam profile

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE8_812試験無料問題集「Fortinet NSE 8 - Written Exam (NSE8_812) 認定」