Official Bank
0/65
Page
1/4
Fortinet NSE 8 Written Exam (NSE8_811) - Fortinet Exam Questions
Last updated on June 20, 2026
97%
Exam Compliance
65
Total Questions
1
Question
Click the exhibit. You created an aggregate interface between your FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds. 1 Gbps and employees are complaining that the network is slow. After troubleshooting, you notice only one member interface is being used. The configuration for the aggregate interface is shown in the exhibit. In this scenario, which command will solve this problem?
Options
A
config system interface edit Agg1 set min-links 2 end
B
config system interface edit Agg1 set Algorithm L4 end
C
config system interface edit Agg1 set lacp-mode active end
D
config system interface edit Agg1 set weight 2 end
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
2
Question
Refer to the exhibit.
The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
• 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
• The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)
The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
• 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
• The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)
Select 2
Options
A
Configure the master FortiGate with one LAG and FortiLink split interface enabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
B
Configure both FortiSwitch devices as peers with ISL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
C
Configure the master FortiGate with one LAG and FortiLink split interface disabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
D
Configure both FortiSwitch devices as peers with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
3
Question
Exhibit
An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption. Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)
An organization has a FortiGate cluster that is connected to two independent ISPs. You must configure the FortiGate failover for a single ISP failure to occur without disruption. Referring to the exhibit, which two FortiGate BGP features are enabled to accomplish this task? (Choose two.)
Select 2
Options
A
Synchronization
B
EBGP multipath
C
BFD
D
Graceful restart
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
4
Question
Refer to the exhibit.
Click the Exhibit button. A FortiGate with the default configuration is deployed between two IP phones. FortiGate receives the INVITE request shown in the exhibit form Phone A (internal)to Phone B (external). Which two actions are taken by the FortiGate after the packet is received? (Choose two.)
Click the Exhibit button. A FortiGate with the default configuration is deployed between two IP phones. FortiGate receives the INVITE request shown in the exhibit form Phone A (internal)to Phone B (external). Which two actions are taken by the FortiGate after the packet is received? (Choose two.)
Select 2
Options
A
The phone A IP address will be translated lo the WAN IP address in all INVITE header fields and the m: field of the SDP statement.
B
A pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49169 and 49170.
C
The phone A IP address will be translated for the WAN IP address in all INVITE header fields and the SDP statement remains intact.
D
a pinhole will be opened to accept traffic sent to FortiGate's WAN IP address and ports 49l70 and 49171.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
5
Question
You configured a firewall policy with only a Web filter profile for accessing the Internet. Access to websites belonging to the "Information Technology" category are blocked and to the "Business" category are allowed. SSL deep inspection is not enabled on this policy. A user wants to access the website https://www.it-acme.com which presents a certificate with
CN=www.acme.com. The it-acme.com domain is categorized as "Information Technology" and the
acme.com domain is categorized as "Business".
Which statement regarding this scenario is correct?
CN=www.acme.com. The it-acme.com domain is categorized as "Information Technology" and the
acme.com domain is categorized as "Business".
Which statement regarding this scenario is correct?
Options
A
The FortiGate is able to read the URL within HTTPS sessions when using SSL certificate inspection so the website will be blocked by the "Information Technology".
B
The website will be allowed by category "Business" as the certificate name takes precedence over the URL.
C
Only with SSL deep inspection enabled will the FortiGate be able to categorized this website.
D
The website will be blocked by category "Information Technology" as the SNI takes precedence over the certificate name.
Discussion
(0 comments)
to join the discussion
Community Discussion
No discussions yet. Be the first to ask!
Delete Comment
Are you sure? This action cannot be undone.
Finish Practice?
Are you sure you want to finish? This will end your practice session.