NSE8_813 試験問題を無料オンラインアクセス

Refer to the exhibit showing the history logs from a FortiMail device.

Which FortiMail email security feature can an administrator enable to treat these emails as spam?

• A.Sender domain validation in a session profile
• B.DKIM validation in a session profile
• C.Impersonation analysis in an antispam profile
• D.Soft fail SPF validation in an antispam profile

Your company uses a cluster of two FortiGate 3600C units in active-passive mode to protect the corporate network. The FortiGate cluster sends its logs to a FortiAnalyzer and you have configured scheduled weekly reports for the Internet bandwidth usage of each corporate VLAN.
During a scheduled maintenance window, you make a series of configuration changes.
When the next FortiAnalyzer weekly report is generated, you notice that Internet bandwidth usage reported by the FortiAnalyzer is far less than expected.
What is the reason for this discrepancy?

• A.You disabled all security profiles on some of the firewall policies, and the traffic matching those policies is now accelerated.
• B.You applied an antivirus profile on some of the policies, and no traffic can be accelerated.
• C.You enabled HA session-pickup, which is turn disabled session accounting.
• D.You changed from active-passive to active-active, causing the session traffic counters to become inaccurate.

A FortiGate is deployed in the NAT/Route operation mode.
This operation mode operates at which 051 layer?

• A.Layer 4
• B.Layer 1
• C.Layer 2
• D.Layer 3

Refer to the exhibit. You are deploying a FortiGate 6000F. The device should be directly connected to a switch. In the future, a new hardware module providing higher speed will be installed in the switch, and the connection to the FortiGate must be moved to this higher-speed port.
You must ensure that the initial FortiGate interface connected to the switch does not affect any other port when the new module is installed and the new port speed is defined.
How should the initial connection be made?

• A.Connect the switch on any interface between ports 25 to 28
• B.Connect the switch on any interface between ports 1 to 4
• C.Connect the switch on any interface between ports 5 to 8
• D.Connect the switch on any interface between ports 21 to 24

Refer to the exhibit showing an SD-WAN configuration.

According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet
172.16.205.0/24, which outgoing interfaces will be used?

• A.port1 and port1
• B.port16 and port1
• C.port16 and port15
• D.port1 and port15