Fortinet NSE8 問題集

質問 1：
Referring to the command output shown on the exhibit, how many hosts are connected to the FortiGate?

A. 2
B. 256
C. 6
D. 7
正解：C

質問 2：
Your marketing department uncompressed and executed a file that the whole department received using
Skype.
Reviewing the exhibit, which two details do you determine frim your initial analysis if the payload?

A. The payload contains strings that the malware is monitoring to harvest credentials.
B. This type of threat of a DDoS attack using instant messaging to send e-m ails to further spread the
infection.
C. This is a type of Trojan that will download and pirate movies using your Netflix credentials.
D. This threat payload is uploading private user videos which are then used to extort Bitcoin payments.
正解：C

質問 3：
Your FortiGate has multiple CPUs. You want to verify the load for each CPU.
Which two commands will accomplish this task? (Choose two.)
A. diag system top
B. diag system mpstat
C. get system performance status
D. diag system cpu stat
正解：A,C

質問 4：
Referring to the exhibit, you want to know if aggregating port7 and port22 will work.
Which statement is correct?

A. Yes, LACP is supported on ports that are linked together with integrated Switch Fabric.
B. No, LACP is not supported on NP6 platforms.
C. Yes, LACP is supported on all ports regardless if they are connected to the same NP6.
D. No, LACP is only supported on ports connected to the same NP6.
正解：D

質問 5：
A company wants to protect against Denial of Service attacks and has launched a new project.
They want to block the attacks that go above a certain threshold and for some others they are just trying to get a
baseline of activity for those types of attacks so they are letting the traffic pass through without action.
Given the following:
-The interface to the Internet is on WAN1.
-There is no requirement to specify which addresses are being protected or protected from.
-The protection is to extend to all services.
-The tcp_syn_flood attacks are to be recorded and blocked.
-The udp_flood attacks are to be recorded but not blocked.
-The tcp_syn_flood attack's threshold is to be changed from the default to 1000.
The exhibit shows the current DoS-policy.
Which policy will implement the project requirements?

A:

B:

C:

D:

A. Option A
B. Option C
C. Option D
D. Option B
正解：C,D

質問 6：
Your security department has requested that you implement the OpenSSL TLS Heartbeat lnformation
disclosure signature using an IPS sensor to scan traffic destined to the FortiGate. You must log all
packets that attempt to exploit this vulnerability.
Referring to the exhibit, which two configurations are required to accomplish this task? (Choose two.)

A:

B:

C:

D:

A. Option A
B. Option C
C. Option D
D. Option B
正解：D