NSE8_811 試験問題を無料オンラインアクセス

You are asked to implement a single FortiGate 5000 chassis using Session-aware Load Balance Cluster (SLBC) with Active - Passive FortinControllers. Both FortiControllers have the configuration shown below, with the rest of the configuration set to the default values:
config system ha
set mode dual
set password fortinetnse8
set group-id 5
set chassis-id 1
set minimize-chassis-failover enable
set hbdev "b1"
end
Both FortiControllers show Master status. What is the problem in this scenario?

• A.The management interface of both FotiControllers was connected on the some network.
• B.The priority should be set higher for ForControllers on slot-1.
• C.The b1 interface the two FortiConrollers do not see each other.
• D.The chassis ID settings on FotiControllers on slot 2 should be set to 2.

In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied.
config load-balance session-setup
set tcp-ingress enable
end
When statement is true on how new TCP sessions are handled by the Distributor Processor (DP)?

• A.A new session added m the DP session table remains in the table remain in the traffic is denied by the procession worker.
• B.A new session added in the OP session table remains is the table only if traffic is traffic is accepted by the processing worker.
• C.The new session added the DP session table is automatically deleted, if the traffic is denied by the processing worker.
• D.No new session is added is the DP session table until the processing worker accepts the traffic.

Click the Exhibit button.
Your customer is using dynamic routing to exchange the default route between two FortiGates using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below:

According to the exhibit, what is causing the problem?

• A.There is an OSPF interface network-type mismatch.
• B.A prefix for the detail route is missing
• C.OSPF requires the redistribution of connected networks.
• D.FG2 is within the wrong OSPF area.

Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

• A.LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802 3ad trunk on another device.
• B.LAG-1 and LAG 2 should be connected to a single 4-port 802 3ad interface on the FortiGate-A.
• C.LAG-1 and LAG-2 should be connected to a 4-port single 802 3ad trunk on another device.
• D.port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.

Exhibit
Click the Exhibit button.
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.
Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)

• A.Traffic that does match any spp policy will not be inspection by this spp.
• B.FortiDooS will start dropping packets as soon as the traffic executed the configured maintain threshold.
• C.SYN packets with payloads will be drooped.
• D.FortiDDos will not send a SYNACK if a SYN packet is coming from an IP address that is not the legtimate IP (LIP) address table.