Fortinet NSE8_813 Real Exam Questions Test Engine Dumps Training With 245 Questions [Q138-Q156]

QUESTION 138
Refer to the exhibits, which show a network topology and VPN configuration.


A network administrator has been tasked with modifying the existing dial-up IPsec VPN infrastructure to detect the path quality to the remote endpoints.
After applying the configuration shown in the configuration exhibit, the VPN clients can still connect and access the protected 172.16.205.0/24network, but no SLA information shows up for the client tunnels when issuing the diagnose sys link-monitor tunnel all command on the FortiGate CLI.
What is wrong with the configuration?

QUESTION 139
An administrator discovers that CPU utilization of a FortiGate-200F is high and determines that no traffic is being accelerated by hardware.
Why is no traffic being accelerated by hardware?

QUESTION 140
You are asked to design a secure solution using Fortinet products for a company. The company recently has Web servers that were exploited and defaced. The customer has also experienced Denial or Service due to SYN Flood attacks. Taking this into consideration, the customer’s solution should have the following requirements:
– management requires network-based content filtering with man-in-the-
middle inspection
– the customer has no existing public key infrastructure but requires
centralized certificate management
– users are tracked by their active directory username without
installing any software on their hosts
– Web servers that have been exploited need to be protected from the OW ASP Top 10
– notification of high volume SYN Flood attacks when a threshold has
been triggered
Which three solutions satisfy these requirements? (Choose three.)

QUESTION 141
Which Fortinet product is used for antispam protection?

QUESTION 142
Refer to The exhibit, which shows a topology diagram.

A customer wants to use SD-WAN for traffic generated from the data center towards Branches.
SD- WAN on HUB should follow the underlay condition on each Branch and the solution should be scalable for hundreds of Branches.
Which SD WAN-Rules strategy should be used?

QUESTION 143
Refer to the exhibits, which show a topology and diagnostic commands.


Which two statements about the path resolution are true? (Choose two.)

QUESTION 144
Which three statements about throughput on a wireless network are true? (Choose three.)

QUESTION 145
You configured a FortiADC in a one-arm deployment load balancing two IIS Windows servers in a DMZ behind an existing FortiGate. The Virtual IP and firewall policy in the FortiGate has been properly configured to point incoming web traffic to the correct FortiADC virtual server IP.
The FortiADC and IIS server logs shows incoming traffic, but the client devices did not receive any response traffic.
Which two options are possible reasons for this behavior? (Choose two.)

QUESTION 146
Refer to the exhibits.
Exhibit A

Exhibit B

A customer is looking for a solution to authenticate the clients connected to a hardware switch interface of a FortiGate 400E.
Referring to the exhibits, which two conditions allow authentication to the client devices before assigning an IP address? (Choose two.)

QUESTION 147
Which two statements about bounce address tagging and verification (BATV) on FortiMail are true? (Choose two.)

QUESTION 148
Refer to the exhibit.

An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption.
Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task?
(Choose two.)

QUESTION 149
What is the benefit of using FortiGate NAC LAN Segments?

QUESTION 150
Refer to the exhibit. The exhibit shows the forensics analysis of an event detected by the FortiEDR core.
In this scenario, which statement is correct regarding the threat?

QUESTION 151
Which two features are supported only by FortiMail but not by FortiGate? (Choose two.)

QUESTION 152
Refer to the CLI configuration of an SSL inspection profile from a FortiGate device configured to protect a web server:

Based on the information shown, what is the expected behavior when an HTTP/2 request comes in?

QUESTION 153
Referring to the exhibit, you want to know if aggregating port7 and port22 will work.
Which statement is correct?

QUESTION 154
How would you apply security to the network shown on the exhibit?

QUESTION 155
An administrator wants to assign static IP addresses to users connecting tunnel-mode SSL VPN.
Each SSL VPN user must always get the same unique IP address which is never assigned to any other user.
Which solution accomplishes this task?

QUESTION 156
Referring to the exhibit, which statement is true?