Online Access Free NSE8_810 Practice Test

You have a customer with a SCADA environmental control devices that is trigged a false-positive OPS alert whenever the device's Web GUI is accessed. You cannot seem to create a functional custom IPS filter expert this behavior, and it appears that the device is so old that it does HTTPS support. You need to prevent the false posited IPS alert occurring.
In this scenario, which two actions would accomplish this task? (Choose two.)

• A.Reconfigure the FortiGate to operate in proxy-based inspection mode instead of flow-based.
• B.Create a very granular firewall for that device's IP address which does not perform IPS scanning.
• C.Create a URL filter with the exempt action for that device's IP address.
• D.Change the relevant firewall policies to use SSL certificate-inspection instead of SSL deep-inspection.

Click the exhibit.
You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?

• A.config system interface
  edit Agg1
  set weight 2
  end
• B.config system interface
  edit Agg1
  set lacp-mode active
  end
• C.config system interface
  edit Agg1
  set Algorithm L4
  end
• D.config system interface
  edit Agg1
  set min-links 2
  end

Exhibit

Click the Exhibit button. The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb. Which statement represents the purpose of this policy?

• A.The policy redirects all HTTPS URLs to HTTP.
• B.The policy redirects only HTTPS URLs containing the ^/ (. *) S string to HTTP.
• C.The pokey redirects only HTTP URLs containing the^/ ( .*)S string to HTTPS.
• D.The policy redirects all HTTP URLs to HTTPS.

An organization has one central site And three remote sites. A FotiSIEM has been drafted on the central site and now all devices across the remote sites need to be monitored by the FortiSlEM.
When action would reduce the WAN usage by the monitoring system?

• A.Disable monitoring on the remote sites during the day.
• B.Deploy a single Supervisor on the central site and enable WAN optimize on the WAN gateways.
• C.Install local Collection remote site.
• D.install a Supervisor and a Collector for each remote site.

Exhibit
Click the Exhibit button.
You have deployed several perimeter FortiGates with internal segmentation FortiGates behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGates only.

Which two actions would reduce the number of these log messages? (Choose two.)

• A.Apply an application control profile lo the perimeter FortiGates that does not inspect DNS traffic to the outbound firewall policy.
• B.Configure the internal ForbGates to communicate to ForpGuard using port 8888.
• C.Remove DNS signature* <rom the IPS protte appfced to the outbound firewall policy.
• D.Disable DNS events logging horn ForirGate In the config log fortianalyser filter section.