Fortinet NSE8 問題集

質問 1：
You are asked to write a FortiAnalyzer report that lists the session that has consumed the most bandwidth.
You are required to include the source IP, destination IP, application, application category, hostname, and
total bandwidth consumed.
Which dataset meets these requirements?
A. select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
+ coalesce('rcvdbyte", O)) as bandwidth from $log where $filter LIMIT 1
B. select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
+ coalesce('recbyte ", O)) as bandwidth from $log where $filter LIMIT 1
C. select from_itime(itime) as timestamp, sourceip, destip, app, appcat, hostname,
sum(coalesce('sentbyte', O)+coalesce('rcvdbyte", O)) as bandwidth from $log where $filter LIMIT 1
D. select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
+ coalesce('recbyte", O)) as bandwidth from $log where $filter LIMIT 1
正解：A

質問 2：
Given the following FortiOS 5.2 commands:

Which vulnerability is being addresses when managing FortiGate through an encrypted management
protocol?
A. SSL/TLS MITM vulnerability (CVE-2014-0224)
B. Remote Exploit Vulnerability in Bash (ShellShock)
C. Information Disclosure Vulnerability in OpenSSL (Heartbleed)
D. SSL v3 POODLE Vulnerability
正解：D

質問 3：
Which Fortinet product is used for antispam protection?
A. FortiDB
B. FortiGate
C. FortiWeb
D. FortiSwitch
正解：B

質問 4：
Referring to the configuration shown on the exhibit, which three statements are true? (Choose three.)

A. Traffic logging is disabled in policy 96.
B. No QoS is applied to this traffic.
C. The traffic goes through a VIP applied to policy 96.
D. No packet has hit this session in the last five minutes.
E. TCP handshake is completed and no FIN/RST has been forwarded.
正解：E

質問 5：
You are investigating a problem related to FTP active mode.
You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file.
The FortiGate translates source address (SNAT) in network 10.100.60.0/24 to the IP address 172.16.133.1.
Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)
A:

B:

C:

D:

A. Option A
B. Option C
C. Option D
D. Option B
正解：A

質問 6：
Referring to the exhibit, you want to know if aggregating port7 and port22 will work.
Which statement is correct?

A. Yes, LACP is supported on ports that are linked together with integrated Switch Fabric.
B. No, LACP is not supported on NP6 platforms.
C. Yes, LACP is supported on all ports regardless if they are connected to the same NP6.
D. No, LACP is only supported on ports connected to the same NP6.
正解：D