NSE 8 Written Exam (NSE8_811) Exam Questions PDF download

QUESTION: 6

You want to access the JSON API on FortiManager to retrieve information on an object. In this scenario, which two methods will satisfy the requirement? (Choose two.)

Make a call with the Web browser on your workstation.
Make a call with the SoapUl API tool on your workstation.
Download the WSDL file from FortiManager administration GUI.
Make a call with the curl utility on your workstation

Answer(s): A,D

Reveal Solution Next Question

QUESTION: 7

Exhibit

You created a custom health-check for your FortiWeb deployment. Referring to the output shown in the exhibit, which statement is true?

The FortiWeb must receive an RST packet from the server.
The FortiWeb must receive an HTTP 200 response code from the server.
The FortiWeb must receive an ICMP Echo Request from the server.
The FortiWeb must match the hash value of the page index html.

Answer(s): B

Reveal Solution Next Question

Click the exhibit.
You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?

config system interface edit Agg1
set min-links 2
end
config system interface edit Agg1
set weight 2
end
config system interface edit Agg1
set Algorithm L4

end
config system interface edit Agg1
set lacp-mode active end

Answer(s): C

Reveal Solution Next Question

QUESTION: 9

Click the exhibit button.

A FortiGate device is configured to authenticate SSL VPN users using digital certificates. Part of the FortiGate configuration is shown in the exhibit.

Which two statements are true in this scenario? (Choose two.)

The authentication will fail if the OCSP server is down.
OCSP is used to verify that the user-signed certificate has not expired.
The authentication will fail if the certificate does not contain user principle name (UPN) information.
The authentication will fail if the user certificate does not contain the CA_Cert string in the Failed.

Answer(s): A,C

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD48218

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/751987/ssl-vpn-with-ldap- integrated-certificate-authentication

Reveal Solution Next Question

QUESTION: 10

Click the Exhibit button.
Referring to the exhibit, which command-line option for deep inspection SSL would have the FortiGate re-sign all untrusted self-signed certificates with the trusted Fortinet_CA_SSL certificate?

allow
block
ignore
inspect

Answer(s): C

Explanation:

https://help.fortinet.com/cli/fos60hlp/60/Content/FortiOS/fortiOS-cli-ref/config/firewall/ssl-ssh-

profile.htm

Reveal Solution Next Question

Fortinet NSE 8 Written Exam (NSE8_811) NSE8_811 Dumps in PDF

Free Fortinet NSE8_811 Real Questions (page: 12)

QUESTION: 6

QUESTION: 7

QUESTION: 8

QUESTION: 9

Explanation:

QUESTION: 10

Explanation: