Online Access Free NSE8_810 Practice Test

Your client wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUL and provide different levels of access for different types of employees.
Which three actions required providing the requested functionality? (Choose three.)

• A.Enable occprofile-override in the CLI.
• B.Enable radius-vdom-override in the CLI.
• C.Create a wildcard administrator on the FortGate
• D.Set the RADIUS authencation type to MS-CHApV2.
• E.Create multiple administrator profiles with matching RADIUS VSAs.

Click the Exhibit button.
You have installed a FortiSandbox and configured it in your FortiMail. Referring to the exhibit, which two statements are correct? (Choose two.)

• A.FortiMail will wait for 30 minutes to obtain the scan results.
• B.If the FortiSandbox with IP 10.10 10 3 is not available, the e-mail will be checked by the FortiCloud Sandbox.
• C.If FortiMail is not able to obtain the results from the fortiGuard quenes. URls will not be checked by the FortiSandbox.
• D.FortiMail will cache the results for 30 minutes.

You must create a high Availability deployment with two FortiWebs in Amazon Services (AWS): each on different Availability Zones(AZ) from the same region. At the same time, each FortiWeb should be able to deliver content from the Web server of both of the AZs. Which deployment would will this requirement?

• A.Use AWS Router 53 to load balance FortiWebs in standone mode and use AWS Virtual private Cloud (VPC) peering to load balance the internal Web servers.
• B.Configure the FortiWebs Active-Active Ha mode and use AWS Router 53 load Router balance the internal Web servers.
• C.Configure the FortiWebs in Active-Active HA mode and use AWS Elastic load Balancer (ELB) for the internal Web servers.
• D.Use AWS Elastic load Balancer (ELB) for both FortiWebs in standdone mode and the internal Web servers in an ELB sandwich.

You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?

• A.asymmetric mode
• B.rate limiting mode
• C.blocking mode
• D.aggressive aging mode

Exhibit

The exhibit shows a topology where a FortiGate is two VDOMS, root and vd-vlasn. The root VDCM provides SSL-VPN access, where the users authenticated by a FortiAuthenticatator. The vd-lan VDOM provids internal access to a Web server. For the remote users to access the internal web server, there are a few requirements, which are shown below.
--At traffic must come from the SSI-VPN
--The vd-lan VDOM only allows authenticated traffic to the Web server.
-- Users must only authenticate once, using the SSL-VPN portal.
-- SSL-VPN uses RADIUS-based authentication.
referring to the exhibit, and the requirement describe above, which two statements are true?
(Choose two.)

• A.root sends "RADIUS Accounting Messages" to FortiAuthenticator.
• B.vd-lan connects to Fort authenticator as a regular FSSO client.
• C.root is configured for FSSO while vd-lan is configuration for RSSO.
• D.vd-lan authentication messages from root using FSSO.