Online Access Free NSE8 Practice Test

You are hosting Web applications that must be PCI DSS compliant. The Web applications are protected
by a FortiWeb. Compliance will be tested during the quarterly security review.
In this scenario, which three FortiWeb features should you use? (Choose three.)

• A.the config system advanced set weark_enc disable end command.
• B.Credit Card Detection
• C.Syn Cookie
• D.Auto-learning
• E.Vulnerability Scan

The SECOPS team in your company has started a new project to store all logging data in a disaster
recovery center. All FortiGates will log to a secondary FortiAnalyzer and establish a TCP session to send
logs to the syslog server.
Which two configurations will achieve this goal? (Choose two.)
A:

B:

C:

D:

• A.Option C
• B.Option D
• C.Option B
• D.Option A

The wireless controller diagnostic output is shown on the exhibit.
Which three statements are true? (Choose three.)

• A.The "src-vis" process is active on the staff wireless network VAP interface.
• B.There are no wireless clients connected to the guest wireless network.
• C.This is a CAPWAP control channel diagnostic command.
• D.An access control list applied to the VAP interface blocks Android devices.
• E.Firewall policies using device types are blocking Android devices.

Which three statements about throughput on a wireless network are true? (Choose three.)

• A.Because of the higher level of RF noise that is typical in the 2.4 GHz ISM band, throughput of 2.4 GHz
  devices will typically be less than 5 GHz devices.
• B.Be careful to ensure the capabilities of the wireless clients match those of the access points, in order to
  achieve higher throughput.
• C.Because of the full-duplex nature of the medium and the minimal overhead generated by CSMA/CA,
  the actual aggregate throughput is typically close to the data rate.
• D.A wireless device labelled as 300 Mbps should be expected to provide a throughput of 300Mbps.
• E.Reducing the duty cycles of the wireless media by generating fewer beacons may improve throughput.

Which three configuration scenarios will result in an IPsec negotiation failure between two FortiGate
devices? (Choose three.)

• A.mismatched IKE version
• B.failed Dead Peer Detection negotiation
• C.mismatched phase 2 selectors
• D.mismatched Perfect Forward Secrecy
• E.mismatched Anti-Replay configuration