Weekend Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

Note! Following NSE8_811 Exam is Retired now. Please select the alternative replacement for your Exam Certification. The new exam code is NSE8_812

Verified By IT Certified Experts

CertsTopics.com Certified Safe Files

Up-To-Date Exam Study Material

99.5% High Success Pass Rate

100% Accurate Answers

Instant Downloads

Exam Questions And Answers PDF

Try Demo Before You Buy

Certification Exams with Helpful Questions And Answers

Fortinet NSE 8 Written Exam (NSE8_811) Questions and Answers

Question 1

Exhibit

Click the Exhibit button.

A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it.

However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.

Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

Options:

A.

set enforce-unique-id disable

B.

set add-router enable

C.

set single-source disable

D.

set router-overlap allow

Buy Now
Question 2

You deploy a FortiGate device in a remote office based on the requirements shown below.

-- Due to company's security policy, management IP of your FortiGate is not allowed to access the Internet.

-- Apply Web Filtering, Antivirus, IPS and Application control to the protected subnet.

-- Be managed by a central FortiManager in the head office.

Which action will help to achieve the requirements?

Options:

A.

Configure a default route and make sure that the FortiGate device can pmg to service fortiguard net.

B.

Configure the FortiGuard override server and use the IP address of the FortiManager

C.

Configure the FortiGuard override server and use the IP address of service, fortiguard net.

D.

Configure FortiGate to use FortiGuard Filtering Port 8888.

Question 3

A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.

- E-mails can only be accepted if a valid e-mail account exists.

- Only authenticated users can send e-mails out

Which two actions will satisfy the requirements? (Choose two. )

Options:

A.

Configure recipient address verification.

B.

Configure inbound recipient policies.

C.

Configure outbound recipient policies.

D.

Configure access control rules.