Official Bank 0/59

Fortinet Network Security Expert 8 Written Exam (800) (NSE8) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
59 Total Questions
1
Question
A customer wants to enable SYN Rood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet ftom a new source IP address. Which SYN packet from a new source IP address.

Which SYN flood mitigation mode must the customer use?
Options
A ACK cookie
B SYN cookie
C SYN retransmission
D SYN/ACK cookie
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Exhibit You have to data center with a FortiGate 7000-series chassis connected by VPN, and all traffic flows over an established generic routing encapsulation (GRE) tunnel between them. You are troubleshooting traffic that is traversing between Server VLAN A and Server VLAN
Options
A Change the algorithm so it takes IP source IP, destination IP, and port no account.
B Remove traffic shaping from the firewall policy allowing the traffic.
C Configuration a local-balance flow-rule in the CLI to enable load balancing.
D NO course of action enables load balancing in this scenario.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
You must create a high Availability deployment with two FortiWebs in Amazon Services (AWS): each on different Availability Zones(AZ) from the same region. At the same time, each FortiWeb should be able to deliver content from the Web server of both of the AZs. Which deployment would will this requirement?
Options
A Use AWS Router 53 to load balance FortiWebs in standone mode and use AWS Virtual private Cloud (VPC) peering to load balance the internal Web servers.
B Configure the FortiWebs Active-Active Ha mode and use AWS Router 53 load Router balance the internal Web servers.
C Configure the FortiWebs in Active-Active HA mode and use AWS Elastic load Balancer (ELB) for the internal Web servers.
D Use AWS Elastic load Balancer (ELB) for both FortiWebs in standdone mode and the internal Web servers in an ELB sandwich.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
You are administrating the FortiGate 5000 and FortiGate 7000 series products. You want to access the HTTPS GU of the blade located n logical slot of the secondary chassis in a high-availability cluster.

Which URL will accomplish this task?
Options
A https//192.168.1.99.44322
B https//192.168.1.99.44302
C https//192.168.1.99.44313
D https//192.168.1.99.44323
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
Exhibit

Exhibit

An administrator reports continuous high CPU utilization on a device due to the IPS engine. The exhibit shows the global IPS configuration. An administration actions will reduce the CPU usage? (Choose two.)
Select 2
Options
A Change the algorithm to low.
B Disable fail open.
C Enable intelligent mode.
D Reduce the number of packets logged.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.