Fortinet NSE8_811 試験概要:

Fortinet NSE8_811 試験シラバストピック:

Fortinet NSE 8 Written Exam (NSE8_811) 認定 NSE8_811 試験問題：

問題 #1

You want to access the JSON API on FortiManager to retrieve information on an object.
In this scenario, which two methods will satisfy the requirement? (Choose two.)

A. Make a call with the Web browser on your workstation.
B. Download the WSDL file from FortiManager administration GUI.
C. Make a call with the SoapUl API tool on your workstation.
D. Make a call with the curl utility on your workstation

問題 #2

Click the Exhibit button.

Only users authenticated in FortiGate-B can reach the server. A customer wants to deploy a single sign-on solution for IPsec VPN users. Once a user is connected and authenticated to the VPN in FortiGate-A, the user does not need to authenticate again in FortiGate -B to reach the server.
Which two actions satisfy this requirement? (Choose two.)

A. Use Kerberos authentication.
B. Use FortiAuthenticator.
C. Use the Collector Agent.
D. FortiGate-A must generate a RADUIS accounting packets.

問題 #3

A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.
Which statement about creating the object LAN is correct?

A. Create a new object called LAN and set meta-fields per remote site.
B. Create a new object called LAN and use it as a variable on a TCL script.
C. Create a new object called LAN and promote it to the global database.
D. Create a new object called LAN and enable per-device mapping.

問題 #4

You must create a high Availability deployment with two FortiWebs in Amazon Services (AWS): each on different Availability Zones(AZ) from the same region. At the same time, each FortiWeb should be able to deliver content from the Web server of both of the AZs. Which deployment would will this requirement?

A. Configure the FortiWebs in Active-Active HA mode and use AWS Elastic load Balancer (ELB) for the internal Web servers.
B. Configure the FortiWebs Active-Active Ha mode and use AWS Router 53 load Router balance the internal Web servers.
C. Use AWS Router 53 to load balance FortiWebs in standone mode and use AWS Virtual private Cloud (VPC) peering to load balance the internal Web servers.
D. Use AWS Elastic load Balancer (ELB) for both FortiWebs in standdone mode and the internal Web servers in an ELB sandwich.

問題 #5

Anti-Virus Real-Time Protection is enabled without any exclusions.
Referring to the exhibit, which two behaviors will the FortiClient endpoint have after receiving the profile update from the FortiClient EMS? (Choose two.)

A. Files executed from a mapped network drive will not be inspected by the FortiClient endpoint AntiVirus
engine.
B. If the Real-Time Protection does not detect a virus, the user will be able to access a downloaded file when the FortiSandbox is unreachable.
C. The user will not be able to access a downloaded file for a maximum of 60 seconds if it is not a virus and the FortiSandbox is reachable.
D. Access to a downloaded file will always be allowed after 60 seconds when the FortiSandbox is reachable.

解説：