Fortinet NSE 8 - Recertification - NSE8_813 Exam Practice Test
A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.
* E-mails can only be accepted if a valid e-mail account exists.
* Only authenticated users can send e-mails out.
Which two actions will satisfy the requirements? (Choose two.)
* E-mails can only be accepted if a valid e-mail account exists.
* Only authenticated users can send e-mails out.
Which two actions will satisfy the requirements? (Choose two.)
Correct Answer: B,C
Referring to the exhibit, users are reporting that their FortiFones ring but when they pick up, the cannot hear each other. The FortiFones use SIP to communicate with the SIP Proxy Server and RTP between the phones.
Which configuration change will resolve the problem?

Which configuration change will resolve the problem?

Correct Answer: D
The output shown on the exhibit from FortiManager is displayed during an import if the device configuration .
Which statement describes the correct action taken for these duplicate objects?

Which statement describes the correct action taken for these duplicate objects?

Correct Answer: D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
You have received an issue report about users not being able to use a video conferencing application. This application uses two UDP ports and two TCP ports to communicate with servers on the Internet. The network engineering team has confirmed there is no routing problem. You are given a copy of the FortiGate configuration .
Which three configuration objects will you inspect to ensure that no policy is blocking this traffic?
(Choose three.)
Which three configuration objects will you inspect to ensure that no policy is blocking this traffic?
(Choose three.)
Correct Answer: C,D,E
You are investigating a problem related to FTP active mode.
You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file. The FortiGate translates source address (SNAT) in network
10.100.60.0/24 to the IP address 172.16.133.1.
Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)
You use a test PC with IP address 10.100.60.5 to connect to the FTP server at 172.16.133.50 and transfer a large file. The FortiGate translates source address (SNAT) in network
10.100.60.0/24 to the IP address 172.16.133.1.
Which two groups of CLI commands allow you to see information related to this FTP connection (Choose two.)
Correct Answer: C,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit.

You created a custom health-check for your FortiWeb deployment.
Given the output shown in the exhibit, which statement is true?

You created a custom health-check for your FortiWeb deployment.
Given the output shown in the exhibit, which statement is true?
Correct Answer: D
You are administering the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GUI of the blade located in logical slot 3 of the secondary chassis in a high- availability cluster.
Which URL will accomplish this task?
Which URL will accomplish this task?
Correct Answer: D
Refer to the exhibit.

While deploying a new FortiGate-VMX Security node, an administrator receives the error message shown in the exhibit.
In this scenario, which statement is correct?

While deploying a new FortiGate-VMX Security node, an administrator receives the error message shown in the exhibit.
In this scenario, which statement is correct?
Correct Answer: B
Refer to the exhibit. You have deployed a security fabric with three FortiGate devices as shown in the exhibit.

FGT_2 has the following configuration:

FGT_1 and FGT_3 are configured with the default setting.
Which statement is true for the synchronization of fabric-objects?

FGT_2 has the following configuration:

FGT_1 and FGT_3 are configured with the default setting.
Which statement is true for the synchronization of fabric-objects?
Correct Answer: A
You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active-Passive FortiControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values.

Both FortiControllers show Master status.
What is the problem in this scenario?

Both FortiControllers show Master status.
What is the problem in this scenario?
Correct Answer: D
You implemented FortiGate in transparent mode with 10 different VLAN interfaces in the same forwarding domain. You have defined a policy to allow traffic from any interface to any interface.
Which statement about your implementation is true?
Which statement about your implementation is true?
Correct Answer: D
Refer to the exhibit showing the history logs from a FortiMail device.

Which FortiMail email security feature can an administrator enable to treat these emails as spam?

Which FortiMail email security feature can an administrator enable to treat these emails as spam?
Correct Answer: C
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).