Fortinet Network Security Expert 8 Written Exam (NSE8 801 - FortiOS 5.2) (NSE8) Free Practice Test

Question 1

You are an administrator of FortiGate devices that use FortiManager for central management. You need
to add a policy on an ADOM, but upon selecting the ADOM drop-down list, you notice that the ADOM is in
locked state. Workflow mode is enabled on your FortiManager to define approval or notification workflow
when creating and installing policy changes.
What caused this problem?

A. Another administrator has locked the ADOM and is currently working on it.

B. You need to use set workspace-mode workflow on the CLI.

C. There is pending approval waiting from a previous modification.

D. You have read-only permission on Workflow Approve in the administrator profile.

Correct Answer: D

Question 2

A FortiGate is deployed in the NAT/Route operation mode.
This operation mode operates at which 051 layer?

A. Layer 2

B. Layer 4

C. Layer 1

D. Layer 3

Correct Answer: D

Question 3

You are asked to write a FortiAnalyzer report that lists the session that has consumed the most bandwidth.
You are required to include the source IP, destination IP, application, application category, hostname, and
total bandwidth consumed.
Which dataset meets these requirements?

A. select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
+ coalesce('recbyte ", O)) as bandwidth from $log where $filter LIMIT 1

B. select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
+ coalesce('rcvdbyte", O)) as bandwidth from $log where $filter LIMIT 1

C. select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte", 0)
+ coalesce('recbyte", O)) as bandwidth from $log where $filter LIMIT 1

D. select from_itime(itime) as timestamp, sourceip, destip, app, appcat, hostname,
sum(coalesce('sentbyte', O)+coalesce('rcvdbyte", O)) as bandwidth from $log where $filter LIMIT 1

Correct Answer: B

Question 4

There is an interface-mode IPsec tunnel configured between FortiGate1 and FortiGate2. You want to run
OSPF over the IPsec tunnel. On both FortiGates. the IPsec tunnel is based on physical interface Port1.
Port1 has the default MTU setting on both FortiGate units. Which statement is true about this scenario?

A. The MTU must be set manually in the OSPF interface configuration.

B. The MTU must be set manually on the IPsec interface.

C. An IP address must be assigned to the IPsec interface on FortiGate1 and FortiGate2.

D. A multicast firewall policy must be added on FortiGate1 and FortiGate2 to allow protocol 89.

Correct Answer: A

Question 5

Referring to the exhibit, users are reporting that their FortiFones ring but when they pick up, the cannot
hear each other. The FortiFones use SIP to communicate with the SIP Proxy Server and RTP between
the phones.
Which configuration change will resolve the problem?

A:

B:

C:

D:

A. Option D

B. Option C

C. Option A

D. Option B

Correct Answer: B

Question 6

You are installing a new FortiAP as shown on the exhibit, however, the FortiAP cannot discover the
FortiGate. The FortiAP obtained an IP from the DHCP server and is reachable.
Which two configurations will resolve the problem? (Choose two.)

A:

B:

C:

D:

A. Option D

B. Option C

C. Option A

D. Option B

Correct Answer: A

Question 7

A cafe offers free Wi-Fi. Customers' portable electronic devices often do not have antivirus software installed and may be hosting worms without their knowledge.
You must protect all customers from any other customers' infected devices that join the same SSID.
Which step meets the requirement?

A. Enable deep SSH inspection with antivirus and IPS.

B. Use a captive portal to redirect unsecured connections such as HTTP and SMTP to their secured equivalents, preventing worms on infected clients from tampering with other customer traffic.

C. Use WPA2 encryption and configure a policy on FortiGate to block all traffic between clients.

D. Use WPA2 encryption, and enable "Block lntra-SSID Traffic".

Correct Answer: B

Welcome to TestSimulate

Fortinet Network Security Expert 8 Written Exam (NSE8 801 - FortiOS 5.2) (NSE8) Free Practice Test