Free NSE8_811 Exam Braindumps
Fortinet NSE 8 Written Exam (NSE8_811) Questions 11–15 (page: 4)

Updated On: 10-Feb-2026

Exhibit
Click the Exhibit button.



A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGates to connect to it. However, FortiGates A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect white site A is connected, site A is disconnected. The IKE real time debug shows the output in the exhibit when site A is disconnected.
Which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

  1. set enforce-unique-id disable
  2. set add-router enable
  3. set single-source disable
  4. set router-overlap allow

Answer(s): D

Explanation:

https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/487941/vpn-ipsec-phase2- interface-phase2



A customer wants to enable SYN Rood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet ftom a new source IP address.
Which SYN packet from a new source IP address.

Which SYN flood mitigation mode must the customer use?

  1. SYN cookie
  2. SYN/ACK cookie
  3. ACK cookie
  4. SYN retransmission

Answer(s): A



Click the Exhibit button.
You configured AV and Web filtering for your outgoing Internet connections. You later noticed that not all Web sessions are being inspected and you start troubleshooting the problem. Referring to the exhibit, what would cause this problem?

  1. The Web session is using QUIC which a not inspected by the FortiGate
  2. These are problem with the connection to the Web filter servers, therefore the Web session cannot be categorized.
  3. The SSL inspection options are not set to inspection
  4. Web filtering is not licensed, therefore no inspection occurs.

Answer(s): A



You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.
Which URL will accomplish this task?

  1. https//192.168.1.99.44302
  2. https//192.168.1.99.44313
  3. https//192.168.1.99.44322
  4. https//192.168.1.99.44323

Answer(s): D



Click the Exhibit button.

Referring to the exhibit, which two statements are true? (Choose two.)

  1. port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.
  2. LAG-1 and LAG 2 should be connected to a single 4-port 802 3ad interface on the FortiGate-A.
  3. LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802 3ad trunk on another device.
  4. LAG-1 and LAG-2 should be connected to a 4-port single 802 3ad trunk on another device.

Answer(s): A,C

Explanation:

https://help.fortinet.com/fos50hlp/56/Content/FortiOS/fortigate-managing- fortiswitch/Stacking.htm



Viewing page 4 of 14
Viewing questions 16 - 20 out of 65 questions


Post your Comments and Discuss Fortinet NSE8_811 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!