Free Fortinet NSE8_811 Exam Dumps Questions & Answers

A FortiGate with the default configuration shown below is deployed between two IP telephones. FortiGate receives the INVITE request shown in the exhibit from Phone A (internal) to Phone B (external).
NVITE sip:[email protected] SIP/2.0
Via: SIP/2.0/UDP 10.31.101.20:5060
From: PhoneA <sip:[email protected]>
To: PhoneB <sip:[email protected]>
Call-ID: [email protected]
CSeq: 1 INVITE
Contact: sip:[email protected]
v=0
o=PhoneA 5462346 332134 IN IP4 10.31.101.20
c=IN IP4 10.31.101.20
m=audio 49170 RTP 0 3
Which two statements are correct after the FortiGate receives the packet? (Choose two.)

• A.  A pinhole will be opened to accept traffic sent to the FortiGate WAN IP address.
• B.  NAT takes place only in the SIP application layer.
• C.  A pinhole is not required to accept traffic sent to the FortiGate WAN IP address.
• D.  NAT takes place at both the network and SIP application layers.

Click the exhibit.
A VPN IPsec is connecting the headquarters office (HQ) with a branch office (BO) and OSPF is used to redistribute routes between the offices. After deployment, a server with IP address 10.10.10.35 located on the DMZ network of the BO FortiGate, was reported unreachable from hosts located on the LAN network of the same FortiGate.

Referring to the exhibit, which statement is true?

• A.  Enabling NAT on the VPN firewall policy will solve the problem.
• B.  The ICMP packets are Being blocked by an implicit deny policy.
• C.  The incoming access list should have an accept action instead deny action to solve the problem.
• D.  A directly connected subnet is being partially superseded by an OSPF redistributed subnet.

You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?

• A.  https//192.168.1.99.44313
• B.  https//192.168.1.99.44323
• C.  https//192.168.1.99.44302
• D.  https//192.168.1.99.44322

Click the Exhibit button.

Referring to the exhibit, which two statements are true about local authentication? (Choose two.)

• A.  The user will need to re-authenticate after five minutes.
• B.  The user's IP address will be blocked 15 seconds after five login failures.
• C.  The FortiGate will allow the TCP connection when a ClientHello message indicating a renegotiation is
  received.
• D.  The user will be blocked 15 seconds after five login failures.

Refer to the exhibit.

You have two data centers with a FortiGate 7000-series chassis connected by VPN. All traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN B.
The performance is lower than expected and you notice all traffic is only going through the FPM in slot 3 while nothing through the FPM in slot 4.
Referring to the exhibit, which statement is true?

• A.  Removing traffic shaping from the firewall policy allowing this traffic will allow for load-balancing to the other module.
• B.  There is no way to load-balance the traffic in this scenario.
• C.  Configuring a load-balance flow-rule in the CLI will load-balance this traffic.
• D.  Changing the algorithm to take source IP, destination IP and port into account will load balance this traffic to the other module.