Fortinet NSE8_813 : Fortinet NSE 8 - Recertification Exam

As old saying goes, all roads lead to Rome. If you are still looking for your real interests and have no specific plan, our NSE8_813 exam questions can be your new challenge. Now, people are blundering. Few people can calm down and ask what they really want. You live so tired now. Learning of our NSE8_813 practice materials is the best way to stop your busy life. Leave yourself some spare time to study and think. Perhaps you will regain courage and confidence through a period of learning our NSE8_813 preparation quiz. If you want to have a try, we have free demo to help you know about our products.

Regular renewal

Although we have carried out the NSE8_813 exam questions for customers, it does not mean that we will stop perfecting our study materials. Our experts are still testing new functions for the study materials. Even if you have purchased our study materials, you still can enjoy our updated NSE8_813 practice materials. We will soon upload our new version into our official websites. Also, you are advised to pay attention to your emails. Our system will automatically send you the updated version of the NSE8_813 preparation quiz via email. If you do not receive our email, you can directly send an email to us. We will soon solve your problems. The updated version of the study materials will be different from the old version. Some details will be perfected and the system will be updated. You will enjoy learning on our NSE8_813 exam questions.

Money & Information guaranteed

Our company has built the culture of integrity from our establishment. You just need to pay the relevant money for the NSE8_813 practice materials. Our system will never deduct extra money from your debit cards. Also, your payment information of the study materials will be secret. No one will crack your passwords. Our payment system will automatically delete your payment information once you finish paying money for our NSE8_813 exam questions. At the same time, your personal information such as your names, email address will be strictly protected. Our workers will never randomly spread your information to other merchants for making money. In short, your purchasing of our NSE8_813 preparation quiz is totally safe and sound. Also, our website has strong back protection program to resist attacking from hackers. We will live up to your trust and keep advancing.

Printable PDF version

Some people are inclined to read paper materials. Do not worry. Our company has already taken your thoughts into consideration. Our PDF version of the NSE8_813 practice materials support printing on papers. All contents are arranged reasonably and logically. In addition, the word size of the study materials is suitable for you to read. Also, we have left some space for you to make notes. In a word, you need not to spend time on adjusting the PDF version of the NSE8_813 exam questions. You can directly print it on papers. It is easy to carry. Whenever and wherever you go, you can take out and memorize some questions. There will be detailed explanation for the difficult questions of the NSE8_813 preparation quiz. So you do not need to worry about that you cannot understand them.

Fortinet NSE8_813 Exam Syllabus Topics:

Fortinet NSE 8 - Recertification Sample Questions:

1. A customer has FortiAP devices in three branch offices managed from a FortiGate in the HQ.
Each FortiAP is connected to a dedicated management VLAN.
The customer wants the users connected to the FortiAP SSIDs to use the branch local internet connection, but each branch uses a different VLAN ID for the bridge. HQ users travel to different branches and connect to the same SSID.
Which configuration option will solve this requirement?

A) Set a FortiAuthenticator for 802.1x authentication with the Tunnel-Type attribute set to VLAN and use set dynamic-vlan enable on the VAP configuration.
B) Use set vlan-pooling hash on the VAP configuration with the corresponding vlan-pool.
C) Set each FortiAP to a wtp-group and use set vlan-pooling wtp-group on the VAP configuration with the corresponding VLAN ID configuration for each group.
D) Use set vlan-pooling round-robin on the VAP configuration with the corresponding vlan-pool.

2. Refer to the exhibit.

You have two data centers with a FortiGate 7000-series chassis connected by VPN. All traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN B. The performance is lower than expected and you notice all traffic is only going through the FPM in slot
3 while nothing through the FPM in slot 4.
Referring to the exhibit, which statement is true?

A) Configuring a load-balance flow-rule in the CLI will load-balance this traffic.
B) Changing the algorithm to take source IP, destination IP and port into account will load balance this traffic to the other module.
C) There is no way to load-balance the traffic in this scenario.
D) Removing traffic shaping from the firewall policy allowing this traffic will allow for load-balancing to the other module.

3. Refer to the exhibit.

A customer reports that they are not able to reach subnet 10.10.10.0/24 from their FortiGate device. Based on the exhibit, what should you do to correct the situation?

A) Enable additional-path feature
B) Enable next-hop-self feature
C) Enable recursive resolution for BGP routes
D) Enable iBGP multipath

4. Examine the two static routes to the same destination subnet 172.20.168.0/24 as shown below; then answer the question following it.
config router static
edit 1
set dst 172.20.168.0 255.255.255.0
set distance 20
set priority 10
set device port1
next
edit 2
set dst 172.20.168.0 255.255.255.0
set distance 20
set priority 20
set device port2
next
end
Which of the following statements correctly describes the static routing configuration provided above?

A) The FortiGate shares the traffic to 172.20.168.0/24 through both routes, but the port2 route will carry approximately twice as much of the traffic.
B) Only the route that is using port1 will show up in the routing table.
C) The FortiGate evenly shares the traffic to 172.20.168.0/24 through both routes.
D) The FortiGate sends all the traffic to 172.20.168.0/24 through port1.

5. A company has just rolled out new remote sites and now you need to deploy a single firewall policy to all of these sites to allow Internet access using FortiManager. For this particular firewall policy, the source address object is called LAN, but its value will change according to the site the policy is being installed.
Which statement about creating the object LAN is correct?

A) Create a new object called LAN and enable per-device mapping.
B) Create a new object called LAN and set meta-fields per remote site.
C) Create a new object called LAN and use it as a variable on a TCL script.
D) Create a new object called LAN and promote it to the global database.

Solutions: