Free Fortinet NSE8_810 Exam Dumps Questions & Answers

Click the Exhibit button.
Your customer is using dynamic routing to exchange the default route between two FortiGates using OSPFv2.
The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below:

According to the exhibit, what is causing the problem?

• A.A prefix for the detail route is missing
• B.There is an OSPF interface network-type mismatch.
• C.FG2 is within the wrong OSPF area.
• D.OSPF requires the redistribution of connected networks.

Exhibit

An Administrator reports continuous high CPU utilization on a FortiGate device due to the IPS engine. The exhibit shows the global IPS configuration. Which two configuration actions will reduce the CPU usage?
(Choose two.)

• A.Enable intelligent mode.
• B.Change the algorithm to low.
• C.Disable fail open.
• D.Reduce the number of packets logged.

Click the Exhibit button.
A FortiGate with the default configuration is deployed between two IP phones. FortiGate receives the INVITE request shown in the exhibit form Phone A (internal)to Phone B (external). Which two actions are taken by the FortiGate after the packet is received? (Choose two.)

• A.The phone A IP address will be translated lo the WAN IP address in all INVITE header fields and the m: field of the SDP statement.
• B.A pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49169 and
  49170.
• C.a pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49l70 and
  49171.
• D.The phone A IP address will be translated for the WAN IP address in all INVITE header fields and the SDP statement remains intact.

Click the Exhibit button.

Only users authenticated in FortiGate-B can reach the server. A customer wants to deploy a single sign-on solution for IPsec VPN users. Once a user is connected and authenticated to the VPN in FortiGate-A, the user does not need to authenticate again in FortiGate -B to reach the server.
Which two actions satisfy this requirement? (Choose two.)

• A.FortiGate-A must generate a RADUIS accounting packets.
• B.Use Kerberos authentication.
• C.Use the Collector Agent.
• D.Use FortiAuthenticator.

In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied.
config load-balance session-setup
set tcp-ingress enable
end
When statement is true on how new TCP sessions are handled by the Distributor Processor (DP).

• A.A new session added in the OP session table remains is the table only if traffic is traffic is accepted by the processing worker.
• B.A new session added m the DP session table remains in the table remain in the traffic is denied by the procession worker.
• C.The new session added the DP session table is automatically deleted, if the traffic is denied by the processing worker.
• D.No new session is added is the DP session table until the processing worker accepts the traffic.