Free NSE8_811 Exam Braindumps
Fortinet NSE 8 Written Exam (NSE8_811) Questions 6–10 (page: 3)

Updated On: 10-Feb-2026

You want to access the JSON API on FortiManager to retrieve information on an object. In this scenario, which two methods will satisfy the requirement? (Choose two.)

  1. Make a call with the Web browser on your workstation.
  2. Make a call with the SoapUl API tool on your workstation.
  3. Download the WSDL file from FortiManager administration GUI.
  4. Make a call with the curl utility on your workstation

Answer(s): A,D



Exhibit



You created a custom health-check for your FortiWeb deployment. Referring to the output shown in the exhibit, which statement is true?

  1. The FortiWeb must receive an RST packet from the server.
  2. The FortiWeb must receive an HTTP 200 response code from the server.
  3. The FortiWeb must receive an ICMP Echo Request from the server.
  4. The FortiWeb must match the hash value of the page index html.

Answer(s): B



Click the exhibit.
You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit.
In this scenario, which command will solve this problem?

  1. config system interface edit Agg1
    set min-links 2
    end
  2. config system interface edit Agg1
    set weight 2
    end
  3. config system interface edit Agg1
    set Algorithm L4

    end
  4. config system interface edit Agg1
    set lacp-mode active end

Answer(s): C



Click the exhibit button.

A FortiGate device is configured to authenticate SSL VPN users using digital certificates. Part of the FortiGate configuration is shown in the exhibit.

Which two statements are true in this scenario? (Choose two.)

  1. The authentication will fail if the OCSP server is down.
  2. OCSP is used to verify that the user-signed certificate has not expired.
  3. The authentication will fail if the certificate does not contain user principle name (UPN) information.
  4. The authentication will fail if the user certificate does not contain the CA_Cert string in the Failed.

Answer(s): A,C

Explanation:

https://kb.fortinet.com/kb/documentLink.do?externalID=FD48218

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/751987/ssl-vpn-with-ldap- integrated-certificate-authentication



Click the Exhibit button.
Referring to the exhibit, which command-line option for deep inspection SSL would have the FortiGate re-sign all untrusted self-signed certificates with the trusted Fortinet_CA_SSL certificate?

  1. allow
  2. block
  3. ignore
  4. inspect

Answer(s): C

Explanation:

https://help.fortinet.com/cli/fos60hlp/60/Content/FortiOS/fortiOS-cli-ref/config/firewall/ssl-ssh-

profile.htm



Viewing page 3 of 14
Viewing questions 11 - 15 out of 65 questions


Post your Comments and Discuss Fortinet NSE8_811 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!