Free Fortinet NSE8_811 Exam Dumps Questions & Answers

Refer to the exhibit.

You are working on FortiGate 61E operating in flow-based inspection mode with various settings optimized for performance. The main Internet firewall policy is using the "default" antivirus profile. You found that some executable virus samples files downloaded over HTTP are not being blocked by the FortiGate.
Referring to the exhibit, how can this be fixed?

• A.  Disable the emulator feature.
• B.  Change the set scan-mode configuration to full.
• C.  Change the set default-db configuration to extreme.
• D.  Add set content-disarm enable to the configuration.

A customer is looking for a way to remove javascripts, macros and hyperlinks from documents traversing the network without affecting the integrity of the content. You propose to use the Content disarm and
reconstruction (CDR) feature of the FortiGate.
Which two considerations are valid to implement CDR in this scenario? (Choose two.)

• A.  Files processed by CDR can have the original copy quarantined on the FortiGate.
• B.  CDR can only be performed on Microsoft Office Document and PDF files.
• C.  The inspection mode of the FortiGate is not relevant for CDR to operate.
• D.  CDR is supported on HTTPS, SMTPS, and IMAPS if deep inspection is enabled.

Exhibit
Click the Exhibit button.
The exhibit shows the configuration of a service protection profile (SPP) in a FortiDDoS device.
Which two statements are true about the traffic matching being inspected by this SPP? (Choose two.)

• A.  FortiDooS will start dropping packets as soon as the traffic executed the configured maintain threshold.
• B.  SYN packets with payloads will be drooped.
• C.  Traffic that does match any spp policy will not be inspection by this spp.
• D.  FortiDDos will not send a SYNACK if a SYN packet is coming from an IP address that is not the legtimate IP (LIP) address table.

FortiMail configured with the protected domain "internal lab".
Which two envelopes addresses will need an access control rule to relay e-mail sent for unauthenticated users? (Choose two.)

• A.  MAIL FROM student@internal lab: RCPT TO [email protected]
• B.  MAIL FROM student@fortinet com: RCPT TO [email protected]
• C.  MAIL FROM: trainmg@internallab; RCPT TO student@mternallab
• D.  MAIL FROM: traming@fortinet com: RCPT TO: student@fortinet com

Exhibit

Click the Exhibit button. The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb. Which statement represents the purpose of this policy?

• A.  The policy redirects all HTTPS URLs to HTTP.
• B.  The policy redirects only HTTPS URLs containing the ˆ/ (. *) S string to HTTP.
• C.  The pokey redirects only HTTP URLs containing theˆ/ ( .*)S string to HTTPS.
• D.  The policy redirects all HTTP URLs to HTTPS.