Fortinet NSE8_813 : Fortinet NSE 8 - Recertification Exam

A company wants to protect against Denial of Service attacks and has launched a new project.
They want to block the attacks that go above a certain threshold and for some others they are just trying to get a baseline of activity for those types of attacks so they are letting the traffic pass through without action.
Given the following:
- The interface to the Internet is on WAN1.
- There is no requirement to specify which addresses are being
protected or protected from.
- The protection is to extend to all services.
- The tcp_syn_flood attacks are to be recorded and blocked.
- The udp_flood attacks are to be recorded but not blocked.
- The tcp_syn_flood attack's threshold is to be changed from the
default to 1000.
The exhibit shows the current DoS-policy.
Which policy will implement the project requirements?

• A.
  
• B.
  
• C.
  
• D.
  

The exhibit shows an LDAP server configuration on a FortiGate device.
The LDAP user, John Smith, has the following LDAP attributes:

John Smith's LDAP password is ABC123.
Which CLI command should you use to test the LDAP authentication using John Smith's credentials?

• A. diagnose test authserver ldap Lab 'John Smith' ABC123
• B. diagnose test authserver ldap Lab jsmith ABC123
• C. diagnose test authserver ldap-direct Lab jsmith ABC123
• D. diagnose test authserver ldap-direct Lab john ABC123

Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.
config router static
edit 1
set dst 172.20.168.0 255.255.255.0
set distance 20
set priority 10
set device port1
next
edit 2
set dst 172.20.168.0 255.255.255.0
set distance 20
set priority 20
set device port2
next
end
Which of the following statements correctly describes the static routing configuration provided above?

• A. The FortiGate sends all the traffic to 172.20.168.0/24 through port1.
• B. The FortiGate evenly shares the traffic to 172.20.168.0/24 through both routes.
• C. Only the route that is using port1 will show up in the routing table.
• D. The FortiGate shares the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic.

Refer to the exhibit. You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.

How should you create the SD-WAN zones?

• A. With members without interface assignments
• B. With no members configured
• C. With members and assign interfaces but do not specify a gateway
• D. With members and assign overlay interfaces

Refer to the exhibit.

What is happening in this scenario?

• A. The user status changed at FortiClient EMS to off-net.
• B. The user has not authenticated on their external browser.
• C. The user is authenticating against a FortiGate Captive Portal.
• D. The user is authenticating against an IdP.