NSE8_813 Practice Dumps – Verified By ActualCollection Updated 245 Questions [Q121-Q144]

NEW QUESTION 121
Refer to the exhibit.

A customer is using dynamic routing to exchange the default route between two FortiGate devices using OSPFv2. The output of the get router info ospf neighborcommand shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below.

According to the exhibit, what is causing the problem?

NEW QUESTION 122
Refer to the exhibits.
Topology

Configuration

The exhibits show a diagram of a requested topology and the base IPsec configuration.
A customer asks you to configure ADVPN via two internet underlays. The requirement is that you use one interface with a single IP address on DC FortiGate.
In this scenario, which feature should be implemented to achieve this requirement?

NEW QUESTION 123
An administrator discovers that CPU utilization of a FortiGate-200F is high and determines that no traffic is being accelerated by hardware.
Why is no traffic being accelerated by hardware?

NEW QUESTION 124
You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active-Passive FortiControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values.

Both FortiControllers show Master status.
What is the problem in this scenario?

NEW QUESTION 125
A customer just bought an additional FortiGate device and plans to use their existing load balancer to distribute traffic across two FortiGate units participating network serving different neighbors. The customer has mixed traffic of 1Pv4 and 1Pv6 TCP, UDP, and ICMP.
The two FortiGate devices shown in the exhibit should be redundant to each other so that the NAT session and active session tables will synchronize and fail over to the unit that is still operating without any loss of data if one of the units fail.
Which high availability solution would you implement?

NEW QUESTION 126
You are responsible for recommending an adapter type for NICs on a FortiGate VM that will run on an ESXi Hypervisor.
Your recommendation must consider performance as the main concern, cost is not a factor.
Which adapter type for the NICs will you recommend?

NEW QUESTION 127
Refer to the exhibits.

The exhibit shows a FortiGate model device that will be used for zero touch provisioning and a CLI Template.

To facilitate a more efficient roll out of FortiGate devices, you are tasked with using meta fields with the CLI Template to configure the DHCP server on the “office1” FortiGate. Given this scenario, what would be the output of the config ip-range section on the CLI Template?

NEW QUESTION 128
Refer to the exhibit. A customer wants FortiClient EMS configured to deploy to 1500 endpoints The deployment will be integrated with FortiOS and there is an Active Directory server.
Given the configuration shown in the exhibit, which two statements about the installation are correct? (Choose two.)

NEW QUESTION 129
A customer is experiencing problems with a legacy L3/L4 firewall device and the IPv6 SIP VoIP traffic. Their device is dropping SIP packets, consequently, it cannot process SIP voice calls.
Which solution will solve the customer’s problem?

NEW QUESTION 130
Which two features are supported only by FortiMail but not by FortiGate? (Choose two.)

NEW QUESTION 131
Refer to the exhibit.

The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb.
Which statement represents the purpose of this policy?

NEW QUESTION 132
You verified that application control is working from previous configured categories.
You just added Skype on blocked signatures.
However, after applying the profile to your firewall policy, clients running Skype can still connect and use the application.
What are two causes of this problem? (Choose two.)

NEW QUESTION 133
An administrator reports continuous high CPU utilization on a FortiGate device due to the IPS engine.
Consider the global IPS configuration shown below.

Which two configuration actions will reduce the CPU usage? (Choose two.)

NEW QUESTION 134
Refer to the exhibits.


A customer is trying to restore a VPN connection configured on a FortiGate. Exhibits show output during a troubleshooting session when the VPN was working and the current baseline VPN configuration.
Which configuration parameters will restore VPN connectivity based on the diagnostic output?

NEW QUESTION 135
Refer to the exhibit.

You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options.
Referring to the exhibit, which statement is correct in this situation?

NEW QUESTION 136
Given the following FortiOS 5.2 commands:

Which vulnerability is being addresses when managing FortiGate through an encrypted management protocol?

NEW QUESTION 137
Refer to the exhibits, which show a firewall policy configuration and a network topology.
Configuration

Topology

An administrator has configured an inbound SSL inspection profile on a FortiGate device (FG-1) that is protecting a data center hosting multiple web pages.
Given the scenario shown in the exhibits, which certificate will FortiGate use to handle requests to xyz.com?

NEW QUESTION 138
You have deployed two FortiGate devices as an HA pair. One FortiGate will process traffic while the other FortiGate is a standby. The standby monitors the primary for failure and only takes the role of processing traffic if it detects that the primary FortiGate has failed.
Which style of FortiGate HA does this scenario describe?

NEW QUESTION 139
You configured a FortiADC in a one-arm deployment load balancing two IIS Windows servers in a DMZ behind an existing FortiGate. The Virtual IP and firewall policy in the FortiGate has been properly configured to point incoming web traffic to the correct FortiADC virtual server IP.
The FortiADC and IIS server logs shows incoming traffic, but the client devices did not receive any response traffic.
Which two options are possible reasons for this behavior? (Choose two.)

NEW QUESTION 140
Refer to the exhibit.

You are working on FortiGate 61E operating in flow-based inspection mode with various settings optimized for performance. The main Internet firewall policy is using the “default” antivirus profile.
You found that some executable virus samples files downloaded over HTTP are not being blocked by the FortiGate.
Referring to the exhibit, how can this be fixed?

NEW QUESTION 141
Refer to the exhibits.
Topology

Configuration

A customer has deployed a FortiGate with iBGP and eBGP routing enabled. HQ is receiving routes over eBGP from ISP 2; however, only certain routes are showing up in the routing table.
Assume that BGP is working perfectly and that the only possible modifications to the routing table ate solely due to the prefix list that is applied on HQ.
Given the exhibits, which two routes will be active in me routing table on the HQ firewall?
(Choose two.)

NEW QUESTION 142
A company wants to protect against Denial of Service attacks and has launched a new project.
They want to block the attacks that go above a certain threshold and for some others they are just trying to get a baseline of activity for those types of attacks so they are letting the traffic pass through without action.
Given the following:
– The interface to the Internet is on WAN1.
– There is no requirement to specify which addresses are being
protected or protected from.
– The protection is to extend to all services.
– The tcp_syn_flood attacks are to be recorded and blocked.
– The udp_flood attacks are to be recorded but not blocked.
– The tcp_syn_flood attack’s threshold is to be changed from the
default to 1000.
The exhibit shows the current DoS-policy.
Which policy will implement the project requirements?

NEW QUESTION 143
The wireless controller diagnostic output is shown on the exhibit.
Which three statements are true? (Choose three.)

NEW QUESTION 144
Refer to the exhibit.

You have two data centers with a FortiGate 7000-series chassis connected by VPN. All traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN B. The performance is lower than expected and you notice all traffic is only going through the FPM in slot
3 while nothing through the FPM in slot 4.
Referring to the exhibit, which statement is true?