Online Access Free NSE8_811 Practice Test

Exhibit
Click the Exhibit button.
You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options. Referring to the exhibit, which statement is correct in this situation?

• A.The FortiGate model being used does not support LAG.
• B.The FortiGate interfaces are defective and require replacement.
• C.The FortiGate model does not have an Integrated Switch Fabric (ISF).
• D.The FortiGate SFP+ slot does not have the correct module.

Refer to the exhibit.

You have two data centers with a FortiGate 7000-series chassis connected by VPN. All traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN B.
The performance is lower than expected and you notice all traffic is only going through the FPM in slot 3 while nothing through the FPM in slot 4.
Referring to the exhibit, which statement is true?

• A.Removing traffic shaping from the firewall policy allowing this traffic will allow for load-balancing to the other module.
• B.There is no way to load-balance the traffic in this scenario.
• C.Changing the algorithm to take source IP, destination IP and port into account will load balance this traffic to the other module.
• D.Configuring a load-balance flow-rule in the CLI will load-balance this traffic.

A customer wants to enable SYN Rood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet ftom a new source IP address. Which SYN packet from a new source IP address.
Which SYN flood mitigation mode must the customer use?

• A.SYN/ACK cookie
• B.ACK cookie
• C.SYN retransmission
• D.SYN cookie

Exhibit
Click the Exhibit button.

A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it.
However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.
Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

• A.set add-router enable
• B.set enforce-unique-id disable
• C.set router-overlap allow
• D.set single-source disable

Click the Exhibit button. Referring to the exhibit, which two statements are true? (Choose two.)

• A.The IPv4 traffic for nse8user is filtered using the DNS profile.
• B.The IPv4 policy is allowing security profile groups.
• C.The Web traffic for nse8user is being filtered differently in IPv4 and IPv6.
• D.The IPv6 traffic for nse8user is filtered using the DNS profile.