Fortinet NSE8 問題集

質問 1：
You verified that application control is working from previous configured categories. You just added Skype
on blocked signatures. However, after applying the profile to your firewall policy, clients running Skype
can still connect and use the application.
What are two causes of this problem? (Choose two.)
A. The application control database is not updated.
B. SSL inspection is not enabled.
C. The FakeSkype.botnet signature is included on your application control sensor.
D. A client on the network was already connected to the Skype network and serves as relay prior to
configuration changes to block Skype
正解：A,B

質問 2：
You are installing a new FortiAP as shown on the exhibit, however, the FortiAP cannot discover the
FortiGate. The FortiAP obtained an IP from the DHCP server and is reachable.
Which two configurations will resolve the problem? (Choose two.)

A:

B:

C:

D:

A. Option A
B. Option C
C. Option D
D. Option B
正解：C

質問 3：
You are an administrator of FortiGate devices that use FortiManager for central management. You need
to add a policy on an ADOM, but upon selecting the ADOM drop-down list, you notice that the ADOM is in
locked state. Workflow mode is enabled on your FortiManager to define approval or notification workflow
when creating and installing policy changes.
What caused this problem?
A. Another administrator has locked the ADOM and is currently working on it.
B. You need to use set workspace-mode workflow on the CLI.
C. You have read-only permission on Workflow Approve in the administrator profile.
D. There is pending approval waiting from a previous modification.
正解：C

質問 4：
The FortiGate is used as an IPsec gateway at a branch office. Two tunnels, tunA and tunB, are
established between this FortiGate and the headquarters' IPsec gateway. The branch office's subnet is
1 0.1.1.0/24. The headquarters' subnet is 10.2.2.0/24. The desired usage for tunA and tunB has been
defined as follows:
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 must be routed out over tunA when tunA is up
-sessions initiated from 10.1.1.0/24 to 10.2.2.0/24 have to be routed out over tunB when tunA is down
-sessions initiated from 10.2.2.0/24 can ingress either on tunA or on tunB
Which static routing configuration meets the requirements?
A:

B:

C:

D:

A. Option A
B. Option C
C. Option D
D. Option B
正解：B

質問 5：
The output shown on the exhibit from FortiManager is displayed during an import if the device
configuration .
Which statement describes the correct action taken for these duplicate objects?

A. Forti Manager installs these duplicate objects to the managed device from the ADOM database.
B. The import fails because of the duplicate entries detected which exist in the ADOM database.
C. FortiManager creates indexed duplicate entries for these objects in the ADOM database.
D. FortiManager does not import these duplicate entries into the ADOM database because they already
exist in the ADOM database.
正解：A

質問 6：
You notice that your FortiGate's memory usage is very high and that the unit's performance is adversely affected. You want to reduce memory usage.
Which three commands would meet this requirement? (Choose three.)
A:

B:

C:

D:

E:

A. Option E
B. Option A
C. Option C
D. Option D
E. Option B
正解：A,B,D