Free Fortinet NSE8_813 Exam Dumps Questions & Answers

Refer to the exhibits.
Configuration

Topology

A FortiGate cluster (CL-1) protects a data center hosting multiple web applications. A pair of FortiADC devices are already configured for SSL decryption (FAD-1), and re-encryption (FAD-2).
CL-1 must accept unencrypted traffic from FAD-1, perform application detection on the plain-text traffic, and forward the inspected traffic to FAD-2.
The SSL-Offload-App-Detect application list and SSL-Offload protocol options profile are applied to the firewall policy handling the web application traffic on CL-1.
Given this scenario, which two configuration tasks must the administrator perform on CL-1?
(Choose two.)

• A. 
• B. 
• C. 
• D. 
• E. 

Refer to The exhibit, which shows a topology diagram.

A customer wants to use SD-WAN for traffic generated from the data center towards Branches.
SD- WAN on HUB should follow the underlay condition on each Branch and the solution should be scalable for hundreds of Branches.
Which SD WAN-Rules strategy should be used?

• A.  Manual based on route-tags
• B.  Lowest Cost SLA
• C.  Auto based on link quality
• D.  Best Quality based on route-tags

You are asked to establish a VPN tunnel with a service provider using a third-party VPN device.
The service provider has assigned subnet 30.30.30.0/24 for your outgoing traffic going towards the services hosted by the provider on network 20.20.20.0/24.
You have multiple computers which will be accessing the remote services hosted by the service provider.
Which three configuration components meet these requirements? (Choose three.)

• A.  Configure an IP Pool of type Overload for range 30.30.30.10-30.30.30.10.
  Enable NAT on a policy from your LAN forwards the VPN tunnel and select that pool.
• B.  Configure an IP Pool of Type One-to-One for range 30.30.30.10-30.30.30.10.
  Enable NAT on a policy from your LAN towards the VPN tunnel and select that pool.
• C.  Configure IPsec phase 2 proxy IDs for a source of 10.10.10.0/24 and destination of
  20.20.20.0/24.
• D.  Configure IPsec phase 2 proxy IDs for a source of 30.30.30.0/24 and destination of
  20.20.20.0/24.
• E.  Configure a static route towards the VPN tunnel for 20.20.20.0/24.

You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris.
Which prevention mode on FortiDDoS will protect you against this specific type of attack?

• A.  blocking mode
• B.  aggressive aging mode
• C.  rate limiting mode
• D.  asymmetric mode

Refer to the configuration snippet:

What will happen if you set the cp-accel-mode parameter to advanced? (Choose two.)

• A.  The CP ASIC will start processing all IPS traffic.
• B.  The flow-based IPS signature correlation will be offloaded.
• C.  nTurbo will be enabled.
• D.  Enhanced IPSA will be enabled.