Logo ExamsQA
Exit
Official Bank 0/59

Fortinet Network Security Expert 8 Written Exam (800) (NSE8) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
59 Total Questions
1
Question
Your customer is using dynamic routing to exchange the default route between two FortiGate using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default does not appears in the routing neighbor shows below. According to the exhibit, what is causing the problem?
Options
A There is an OSPF interface network-type mismatch.
B A prefix for the detail route is missing
C OSPF requires the redistribution of connected networks.
D FG2 is within the wrong OSPF area.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
You must create a high Availability deployment with two FortiWebs in Amazon Services (AWS): each on different Availability Zones(AZ) from the same region. At the same time, each FortiWeb should be able to deliver content from the Web server of both of the AZs. Which deployment would will this requirement?
Options
A Use AWS Router 53 to load balance FortiWebs in standone mode and use AWS Virtual private Cloud (VPC) peering to load balance the internal Web servers.
B Configure the FortiWebs Active-Active Ha mode and use AWS Router 53 load Router balance the internal Web servers.
C Configure the FortiWebs in Active-Active HA mode and use AWS Elastic load Balancer (ELB) for the internal Web servers.
D Use AWS Elastic load Balancer (ELB) for both FortiWebs in standdone mode and the internal Web servers in an ELB sandwich.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
You configure an outgoing firewall policy with a web filter for accessing the internet. The access to URL https// itacm.co and web belonging to the same category should be blocked. You notice that the Web server presents a certificate with CN=www acme.com. The www.it.acme site is as '' information Technology and the www.acme.com site is categorized as ''Business". Which statements is correct in this scenario?

Exhibit
Options
A SSL inspection must be configured to deep-inspection: the category "information Technology "needs to be blocked.
B Category "information Technology" needs to blocked, the FortiGate is able to inspection the URL with HTTPS sessions.
C Category :information Technology" needs to be blocked, the SNI takes precedence over the certificate name.
D Category "Business" need a to be block: the certificate name takes precedence over the SNI.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
Exhibit

Exhibit

You created a custom health-check for your FortiWeb deployment. Referring to the output shown in the exhibit, which statement is true?
Options
A The FortiWeb must receive an ICMP Echo Request from the server.
B The FortiWeb must receive an RST packet from the server.
C The FortiWeb must receive an HTTP 200 response code from the server.
D The FortiWeb must match the hash value of the page index html.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Exhibit

Exhibit

You are working on an entry level model FortiGate that has been configured in flow based inspection mode with various settings optimized for performance. It appears that the man Internet Firewall policy using the antivirus profile labeled default. Your customer has found that some virus samples are not being caught by the FortiGate. Referring to the exhibit, what is causing the problem?
Options
A The default AV profile was modified to use quick scan-mode.
B The set default-db configure was set to extreme.
C The set options scan configuration items should have been changed to not option scan avmonitor.
D The mobile-malware-db configuration was set to enable.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.