NSE8_810 무료 덤프문제 온라인 액세스

You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active - Passive FortinControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values:
onfig system ha
set mode dual
set password fortinetnse8
set group-id 5
set chassis-id 1
set minimize-chassis-failover enable
set hbdev "b1"
end
Both FortiControllers show Master status. What is the problem in this scenario?

• A.The management interface of both FotiControllers was connected on the some network.
• B.The b1 interface the two FortiConrollers do not see each other.
• C.The chassis ID settings on FotiControllers on slot 2 should be set to 2.
• D.The priority should be set higher for ForControllers on slot-1.

Click the Exhibit button.
Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMail as a high risk?

• A.The high-risk file will be discarded by malware/virus outbreak protection.
• B.The high-risk file will be received by the recipient.
• C.The high-risk tile will go to the system quarantine.
• D.The high-risk file will be discarded by attachment analysis.

Exhibit

The exhibit shows a topology where a FortiGate is two VDOMS, root and vd-vlasn. The root VDCM provides SSL-VPN access, where the users authenticated by a FortiAuthenticatator. The vd-lan VDOM provids internal access to a Web server. For the remote users to access the internal web server, there are a few requirements, which are shown below.
--At traffic must come from the SSI-VPN
--The vd-lan VDOM only allows authenticated traffic to the Web server.
-- Users must only authenticate once, using the SSL-VPN portal.
-- SSL-VPN uses RADIUS-based authentication.
referring to the exhibit, and the requirement describe above, which two statements are true?
(Choose two.)

• A.root is configured for FSSO while vd-lan is configuration for RSSO.
• B.root sends "RADIUS Accounting Messages" to FortiAuthenticator.
• C.vd-lan connects to Fort authenticator as a regular FSSO client.
• D.vd-lan authentication messages from root using FSSO.

A customer wants to enable SYN Rood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet ftom a new source IP address. Which SYN packet from a new source IP address.
Which SYN flood mitigation mode must the customer use?

• A.SYN retransmission
• B.ACK cookie
• C.SYN cookie
• D.SYN/ACK cookie

In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied.
config load-balance session-setup
set tcp-ingress enable
end
When statement is true on how new TCP sessions are handled by the Distributor Processor (DP).

• A.The new session added the DP session table is automatically deleted, if the traffic is denied by the processing worker.
• B.A new session added m the DP session table remains in the table remain in the traffic is denied by the procession worker.
• C.A new session added in the OP session table remains is the table only if traffic is traffic is accepted by the processing worker.
• D.No new session is added is the DP session table until the processing worker accepts the traffic.