Fortinet NSE8_810 問題集

質問 1：
Exhibit

You created a custom health-check for your FortiWeb deployment.
Referring to the output shown in the exhibit, which statement is true?
A. The FortiWeb must match the hash value of the page index html.
B. The FortiWeb must receive an HTTP 200 response code from the server.
C. The FortiWeb must receive an RST packet from the server.
D. The FortiWeb must receive an ICMP Echo Request from the server.
正解：B

質問 2：
Click the Exhibit button.
Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMail as a high risk?

A. The high-risk file will be discarded by attachment analysis.
B. The high-risk file will be discarded by malware/virus outbreak protection.
C. The high-risk tile will go to the system quarantine.
D. The high-risk file will be received by the recipient.
正解：C

質問 3：
Click the Exhibit button.

A customer has just finished their Azure deployment to secure a Web application behind a FortiGate and a FortiWeb. Now they want to add components to protect against advanced threats (zero day attacks), centrally manage the entire environment, and centrally monitor Fortinet and non-Fortinet products.
Which Fortinet solutions will satisfy these requirements?
A. Use Fortianalyzer for monitor Azure, FortiSiEM for management, and FortiGate has zero day attacks on their local network.
B. Use FortiSIEM for management Azure, FortiManager for management, and FortrGate for zero day attacks on their local network.
C. Use FotiAnalyzer lor monitor in Azure, FortiSlEM for managemnet, and FortiSandbox for zero day attacks on their local network.
D. Use FortiManager for management in Azure, FortSIEM for monitoring and FcrtiSandbox for zero day attacks on their local network.
正解：D

質問 4：
Click the Exhibit button.

Your company has two data centers (DC) connected using a Layer 3 network. Servers in farm A need to connect to servers in farm B as though they all were in the same Layer 2 segment. What would be configured on the FortiGates on each DC to allow such connectivity?
A. Create an IPsec tunnel with VLAN encapsulation.
B. Create an IPsec tunnel with VXLAN encapsulation.
C. Create an IPsec tunnel with transport mode encapsulation.
D. Create an IPsec tunnel with Mode encapsulation.
正解：B

質問 5：
Exhibit
Click the Exhibit button.
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.
Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)

A. FortiDooS will start dropping packets as soon as the traffic executed the configured maintain threshold.
B. Traffic that does match any spp policy will not be inspection by this spp.
C. FortiDDos will not send a SYNACK if a SYN packet is coming from an IP address that is not the legtimate IP (LIP) address table.
D. SYN packets with payloads will be drooped.
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You want to manage a FortiCloud service. The FortiGate shows up in your list devices on the FortiCloud Web site, but all management functions are either missing or grayed out.
Which statement a correct in this scenario?
A. The managed FortiGate requires that a FortiCloud management license be purchased and applied.
B. The management tunnel mode on the managed FortiGate must be changed to normal.
C. You must manually configure system control-management on the FortiGate CLI and set the management type to fortiguard.
D. The managed FcrtGate a running a version of ForflOS that is either too new or too for FortCloud.
正解：C