Online Access Free NSE8_811 Practice Test

Exhibit
Click the Exhibit button.
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.
Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)

• A.FortiDDos will not send a SYNACK if a SYN packet is coming from an IP address that is not the legtimate IP (LIP) address table.
• B.Traffic that does match any spp policy will not be inspection by this spp.
• C.FortiDooS will start dropping packets as soon as the traffic executed the configured maintain threshold.
• D.SYN packets with payloads will be drooped.

Exhibit

You created a custom health-check for your FortiWeb deployment.
Referring to the output shown in the exhibit, which statement is true?

• A.The FortiWeb must receive an ICMP Echo Request from the server.
• B.The FortiWeb must receive an HTTP 200 response code from the server.
• C.The FortiWeb must receive an RST packet from the server.
• D.The FortiWeb must match the hash value of the page index html.

Click the Exhibit button.
config system ha
set mode a-a
set group-id 1
set group-name main
set hb_dev port2 100
set session-pickup enable
end
You have configured an HA cluster with two FortiGates. You want to make sure that you are able to manage the individual cluster members directly using port3.
Referring to the exhibit, what are two ways to accomplish this task? (Choose two.)

• A.Configure port3 to be a dedicated HA management interface, then configure specific IPs for port3 on both cluster members.
• B.Disable the sync feature on porl3: then configure specific IPs for ports on both cluster members.
• C.Create a management VDOM and Disable the HA synchronization for this VDOM, assign ports to this VDOM, then configure specific IPs for ports on both cluster member.
• D.Allow administrative access in the HA heartbeat interfaces.

You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?

• A.aggressive aging mode
• B.asymmetric mode
• C.blocking mode
• D.rate limiting mode

Exhibit

An Administrator reports continuous high CPU utilization on a FortiGate device due to the IPS engine. The exhibit shows the global IPS configuration. Which two configuration actions will reduce the CPU usage? (Choose two.)

• A.Disable fail open.
• B.Reduce the number of packets logged.
• C.Enable intelligent mode.
• D.Change the algorithm to low.