NSE8_810 Free Practice Test

Exhibit
<>

1. A. The policy redirects all HTTP URLs to HTTPS.
2. B. The policy redirects all HTTPS URLs to HTTP.
3. C. The policy redirects only HTTPS URLs containing the ˆ/ (. *) S string to HTTP.
4. D. The pokey redirects only HTTP URLs containing theˆ/ ( .*)S string to HTTP

Correct Answer: A

Exhibit
<>>

1. A. A pinhole will be opened to accept traffic sent to FortiGate\'s WAN IP address and ports 49169 and 49170.
2. B. a pinhole will be opened to accept traffic sent to FortiGate\'s WAN IP address and ports 49l70 and 49171.
3. C. The phone A IP address will be translated lo the WAN IP address in all INVITE header fields and the m: field of the SDP statement.
4. D. The phone A IP address will be translated for the WAN IP address in all INVITE header fields and the SDP statement remains intact.

Correct Answer: BC

Exhibit
<>>

1. A. Use FotiAnalyzer lor monitor in Azure, FortiSlEM for managemnet, and FortiSandbox for zero day attacks on their local network.
2. B. Use Fortianalyzer for monitor Azure, FortiSiEM for management, and FortiGate has zero day attacks on their local network.
3. C. Use FortiManager for management in Azure, FortSIEM for monitoring and FcrtiSandbox for zero day attacks on their local network.
4. D. Use FortiSIEM for management Azure, FortiManager for management, and FortrGate for zero day attacks on their local network.

Correct Answer: A

A FortOS devices is used for termination of VPNs for number of remote spoke VPN units (designated group A spokes) using a phase 1 main mode dial-up tunnel using pre-shared. Your company recently acquired another organization. You are asked establish VPN correctively for the newly acquired organization's sites which new devices will be provisioned (designated Group B spokes). Both exiting (Group A) and new (Group B) spoke units are dynamically addressed. You are asked to ensure that spokes from the acquired organization (Group B) have different access permission than your existing VPN spokes (Group A).
Which two solutions meet the represents for the new spoke group? (Choose two.)

1. A. implements a new phase 1 dial-up mode tunnel with preshared keys and XAut
2. B. Use identity to filter traffic.
3. C. Implement a new phase 1 dial-up main mode tunnel with a different pre-shared key than the Group A spoke
4. D. Use standard policies to filter for the new dial-up tunnel
5. E. Implement a new phase 1 dial-up main mode tunnel with certificate authenticatio
6. F. Use standard policies to filter for the dial-up tunnel.
7. G. Implement separate phase 1 dial-up aggressive mode tunnels with a distinct peer I
8. H. Use standard policies to filter traffic for the new dial-up tunnel.

Correct Answer: AB

Exhibit
<>>

1. A. Enable BFD
2. B. Enable EBGP multipath
3. C. Enable graceful restart
4. D. Enable synchronization

Correct Answer: BC