Online Access Free NSE8_811 Practice Test

Anti-Virus Real-Time Protection is enabled without any exclusions.
Referring to the exhibit, which two behaviors will the FortiClient endpoint have after receiving the profile update from the FortiClient EMS? (Choose two.)

• A.Files executed from a mapped network drive will not be inspected by the FortiClient endpoint AntiVirus
  engine.
• B.If the Real-Time Protection does not detect a virus, the user will be able to access a downloaded file when the FortiSandbox is unreachable.
• C.The user will not be able to access a downloaded file for a maximum of 60 seconds if it is not a virus and the FortiSandbox is reachable.
• D.Access to a downloaded file will always be allowed after 60 seconds when the FortiSandbox is reachable.

Refer to the exhibit.

You have two data centers with a FortiGate 7000-series chassis connected by VPN. All traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN B.
The performance is lower than expected and you notice all traffic is only going through the FPM in slot 3 while nothing through the FPM in slot 4.
Referring to the exhibit, which statement is true?

• A.Configuring a load-balance flow-rule in the CLI will load-balance this traffic.
• B.There is no way to load-balance the traffic in this scenario.
• C.Removing traffic shaping from the firewall policy allowing this traffic will allow for load-balancing to the other module.
• D.Changing the algorithm to take source IP, destination IP and port into account will load balance this traffic to the other module.

Exhibit
Click the Exhibit button.

A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it.
However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.
Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

• A.set add-router enable
• B.set enforce-unique-id disable
• C.set router-overlap allow
• D.set single-source disable

Exhibit

An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)

• A.Graceful restart
• B.Synchronization
• C.EBGP multipath
• D.BFD

You have a customer experiencing problem with a legacy L3L4 firewall device and IPV6 SIP VoIP traffic. They devices is dropping SIP packets, consequently, it process SIP voice calls. Which solution would solve the customer's problem?

• A.Replace their legacy device with a FortiGate and configure it to extract information from the body of the
  IPv6 SIP packet.
• B.Deploy a FortiVoice and enable an IPv6 SIP session helper.
• C.Deploy a FortiVoice and enable IPv6 SIP.
• D.Replace their legacy device with a FortiGate and deploy a FortiVoice to extract information from the body of the IPv6 SIP packet.