Try Fortinet : NSE8_813 valid & accurate questions and answers

Fortinet NSE8_813 Exam Overview:

Fortinet NSE8_813 Exam Syllabus Topics:

Fortinet NSE 8 - Recertification Sample Questions:

1. A university is looking for a solution with the following requirements:
- wired and wireless connectivity
- authentication (LDAP)
- Web filtering, DLP and application control
- data base integration using LDAP to provide access to those students
who are up-to-date with their monthly payments
- support for an external captive portal
Which solution meets these requirements?

A) FortiGate for wireless controller and captive portal FortiAP for wireless connectivity FortiAuthenticator for user authentication and REST API for DB integration FortiSwitch for PoE connectivity FortiAnalyzer for log and report
B) FortiGate for wireless controller FortiAP for wireless connectivity and captive portal FortiSwitch for PoE connectivity FortiAuthenticator for user authentication and REST API for DB integration FortiAnalyzer for log and reports
C) FortiGate for wireless control and user authentication FortiAuthenticator for captive portal and REST API for DB integration FortiAP for wireless connectivity FortiSwitch for PoE connectivity FortiAnalyzer for log and report
D) FortiGate for wireless controller FortiAP for wireless connectivity FortiAuthenticator for user authentication, captive portal and REST API for DB integration FortiSwitch for PoE connectivity FortiAnalyzer for log and report

2. Which three configuration scenarios will result in an IPsec negotiation failure between two FortiGate devices? (Choose three.)

A) mismatched Perfect Forward Secrecy
B) failed Dead Peer Detection negotiation
C) mismatched IKE version
D) mismatched phase 2 selectors
E) mismatched Anti-Replay configuration

3. Refer to the exhibit.

While deploying a new FortiGate-VMX Security node, an administrator receives the error message shown in the exhibit.
In this scenario, which statement is correct?

A) The FortiGate Service Manager does not have the proper permission to register the FortiGate- VMX Service.
B) The vCenter cannot connect to the FortiGate Service Manager.
C) The vCenter is not able to locate the FortiGate-VMX OVF file.
D) The NSX Manager is not able to connect on the FortiGate Service Manager RestAPI service.

4.
Anti-Virus Real-Time Protection is enabled without any exclusions.
Referring to the exhibit, which two behaviors will the FortiClient endpoint have after receiving the profile update from the FortiClient EMS? (Choose two.)

A) If the Real-Time Protection does not detect a virus, the user will be able to access a downloaded file when the FortiSandbox is unreachable.
B) The user will not be able to access a downloaded file for a maximum of 60 seconds if it is not a virus and the FortiSandbox is reachable.
C) Access to a downloaded file will always be allowed after 60 seconds when the FortiSandbox is reachable.
D) Files executed from a mapped network drive will not be inspected by the FortiClient endpoint AntiVirus engine.

5. Refer to the exhibits.


During the implementation of a Fortinet Security Fabric configuration, CLI commands were issued in the order shown in the exhibit. On the next day, the local admin for FGTC issues the following command:

In this scenario, which outcome is true regarding the "subnet_1" firewall address object on FGTC?

A) The object will only be automatically created on FGTC if it is modified on FGTA-1.
B) The object is not automatically created.
C) The object is automatically created.
D) The object needs to be recreated on FGTA-1 before it is automatically created on FGTC.

Solutions: