NSE8無料問題集「Fortinet Network Security Expert 8 Written Exam (NSE8 801

質問 1

A FortiGate is deployed in the NAT/Route operation mode.
This operation mode operates at which 051 layer?

（A）Layer 4

（B）Layer 2

（C）Layer 1

（D）Layer 3

正解：D 解答を投票する

質問 2

Referring to the exhibit, you want to know if aggregating port7 and port22 will work.
Which statement is correct?

（A）No, LACP is only supported on ports connected to the same NP6.

（B）Yes, LACP is supported on all ports regardless if they are connected to the same NP6.

（C）No, LACP is not supported on NP6 platforms.

（D）Yes, LACP is supported on ports that are linked together with integrated Switch Fabric.

正解：A 解答を投票する

質問 3

How would you apply security to the network shown on the exhibit?

（A）Replace RW1 with a normal FortiGate and RW2 with a ruggedized FortiGate. Enable industrial
category on the application controL Place a FortiWeb to secure Web servers. Configure IPsec to secure
sensors data. Place a ruggedized FortiAP to provide Wi-Fi to the sensors.

（B）Replace RW1 with a normal FortiGate and RW2 with a ruggedized FortiGate. Enable industrial
category on the application controL Place a FortiGate to secure Web servers. Configure IPsec to secure
sensors data. Place a FortiAP to provide Wi-Fi to the sensors.
C Replace RW1 with a normal FortiGate and RW2 with a ruggedized FortiGate. Enable industrial
category on the Web filter. Place a FortiWeb to secure Web servers. Configure IPsec to secure sensors
data. Place a ruggedized FortiAP to provide Wi-Fi to the sensors.

（C）Replace RW1 with a ruggedized FortiGate and RW2 with a normal FortiGate. Enable industrial
category on the application control Place a FortiGate to secure Web servers. Configure IPsec to secure
sensors data. Place a ruggedized FortiAP to provide Wi-Fi to the sensors.

正解：A 解答を投票する

質問 4

Referring to the exhibit, which statement is true?

（A）The packet did not match any of the local IPsec SAs.

（B）The packet failed the HMAC validation.

（C）The IPsec negotiation failed because the SPI was unknown.

（D）The packet was protected with an unsupported encryption algorithm.

正解：B 解答を投票する

質問 5

Your FortiGate has multiple CPUs. You want to verify the load for each CPU.
Which two commands will accomplish this task? (Choose two.)

（A）get system performance status

（B）diag system top

（C）diag system cpu stat

（D）diag system mpstat

正解：A、B 解答を投票する

質問 6

The exhibit shows an LDAP server configuration on a FortiGate device. The LDAP user, John Smith, has
the following LDAP attributes:

John Smith's LDAP password is ABC123.
Which CLI command should you use to test the LDAP authentication using John Smith's credentials?

（A）diagnose test authserver ldap Lab jsmith ABC123

（B）diagnose test authserver ldap-direct Lab jsmith ABC123

（C）diagnose test authserver ldap-direct Lab john ABC123

（D）diagnose test authserver ldap Lab 'John Smith' ABC123

正解：A 解答を投票する

質問 7

You verified that application control is working from previous configured categories. You just added Skype
on blocked signatures. However, after applying the profile to your firewall policy, clients running Skype
can still connect and use the application.
What are two causes of this problem? (Choose two.)

（A）SSL inspection is not enabled.

（B）The FakeSkype.botnet signature is included on your application control sensor.

（C）The application control database is not updated.

（D）A client on the network was already connected to the Skype network and serves as relay prior to
configuration changes to block Skype

正解：A、C 解答を投票する

NSE8 無料問題集「Fortinet Network Security Expert 8 Written Exam (NSE8 801 - FortiOS 5.2)」

弊社を連絡する

関連リンク

トップ試験