Free Fortinet NSE8 Exam Dumps Questions & Answers

A customer wants to secure the network shown on the exhibit with a full redundancy design.
Which security design would you use?

• A.  Place a Forti Gate FGCP Cluster between DD and FF, then connect it to SWl, SW2, SW3, and SW4.
• B.  Place a Forti Gate FGCP Cluster between DD and AA, then connect it to SWl, SW2, SW3, and SW4.
• C.  Place a Forti Gate FGCP Cluster between BB and CC, then connect it to SWl, SW2, SW3, and SW4.
• D.  Place a Forti Gate FGCP Cluster between BB and AA, then connect it to SWl, SW2, SW3, and SW4.

You are asked to write a FortiAnalyzer report that lists the session that has consumed the most bandwidth.
You are required to include the source IP, destination IP, application, application category, hostname, and
total bandwidth consumed.
Which dataset meets these requirements?

• A.  select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
  + coalesce('recbyte ", O)) as bandwidth from $log where $filter LIMIT 1
• B.  select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
  + coalesce('recbyte", O)) as bandwidth from $log where $filter LIMIT 1
• C.  select from_itime(itime) as timestamp, sourceip, destip, app, appcat, hostname,
  sum(coalesce('sentbyte', O)+coalesce('rcvdbyte", O)) as bandwidth from $log where $filter LIMIT 1
• D.  select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
  + coalesce('rcvdbyte", O)) as bandwidth from $log where $filter LIMIT 1

Referring to the exhibit, you want to know if aggregating port7 and port22 will work.
Which statement is correct?

• A.  Yes, LACP is supported on ports that are linked together with integrated Switch Fabric.
• B.  No, LACP is not supported on NP6 platforms.
• C.  Yes, LACP is supported on all ports regardless if they are connected to the same NP6.
• D.  No, LACP is only supported on ports connected to the same NP6.

You want to enable traffic between 2001:db8:1::/64 and 2001:db8:2::/64 over the public 1Pv4 Internet.
Given the CLI configuration shown on the exhibit, which two additional settings are required on this device
to implement tunneling for the 1Pv6 transition? (Choose two.)

• A.  1Pv6 static route to the destination phase2 destination subnet.
• B.  1Pv4 static route to the destination phase2 destination subnet.
• C.  1Pv6 firewall policies to allow traffic between the local and remote 1Pv6 subnets.
• D.  1Pv4 firewall policies to allow traffic between the local and remote 1Pv6 subnets.

There is an interface-mode IPsec tunnel configured between FortiGate1 and FortiGate2. You want to run
OSPF over the IPsec tunnel. On both FortiGates. the IPsec tunnel is based on physical interface Port1.
Port1 has the default MTU setting on both FortiGate units. Which statement is true about this scenario?

• A.  The MTU must be set manually in the OSPF interface configuration.
• B.  A multicast firewall policy must be added on FortiGate1 and FortiGate2 to allow protocol 89.
• C.  The MTU must be set manually on the IPsec interface.
• D.  An IP address must be assigned to the IPsec interface on FortiGate1 and FortiGate2.