Fortinet NSE8_813 actual dump : Fortinet NSE 8 - Recertification Exam

You implemented FortiGate in transparent mode with 10 different VLAN interfaces in the same forwarding domain. You have defined a policy to allow traffic from any interface to any interface.
Which statement about your implementation is true?

• A. FortiGate populates the MAC address table based on destination addresses of frames received from all10 VLANs.
• B. All10 VLANs will become a single broadcast domain for the ARP request.
• C. The ARP request will not be forwarded across the different VLANs domains.
• D. There will be no impact on the STP protocol.

You are asked to design a secure solution using Fortinet products for a company. The company recently has Web servers that were exploited and defaced. The customer has also experienced Denial or Service due to SYN Flood attacks. Taking this into consideration, the customer's solution should have the following requirements:
- management requires network-based content filtering with man-in-the-
middle inspection
- the customer has no existing public key infrastructure but requires
centralized certificate management
- users are tracked by their active directory username without
installing any software on their hosts
- Web servers that have been exploited need to be protected from the OW ASP Top 10
- notification of high volume SYN Flood attacks when a threshold has
been triggered
Which three solutions satisfy these requirements? (Choose three.)

• A. FortiAuthenticator
• B. FortiDDOS
• C. FortiCiient
• D. FortiGate
• E. FortiWeb

Refer to the exhibit.

A FortiGate device is configured to authenticate SSL VPN users using digital certificates. A partial FortiGate configuration is shown in the exhibit.
Referring to the exhibit, which two statements about this configuration are true? (Choose two.)

• A. The authentication will fail if the user certificate does not contain the CA_Cert string in the CA field.
• B. The authentication will fail if the OCSP server is down.
• C. OCSP is used to verify that the user-signed certificate has not expired.
• D. The authentication will fail if the user certificate does not contain the user principal name (UPN) information.

There is an interface-mode IPsec tunnel configured between FortiGate1 and FortiGate2.
You want to run OSPF over the IPsec tunnel. On both FortiGates. the IPsec tunnel is based on physical interface Port1. Port1 has the default MTU setting on both FortiGate units.
Which statement is true about this scenario?

• A. A multicast firewall policy must be added on FortiGate1 and FortiGate2 to allow protocol 89.
• B. The MTU must be set manually on the IPsec interface.
• C. An IP address must be assigned to the IPsec interface on FortiGate1 and FortiGate2.
• D. The MTU must be set manually in the OSPF interface configuration.

Which three statements about throughput on a wireless network are true? (Choose three.)

• A. Because of the higher level of RF noise that is typical in the 2.4 GHz ISM band, throughput of 2.4 GHz devices will typically be less than 5 GHz devices.
• B. Because of the full-duplex nature of the medium and the minimal overhead generated by CSMA/CA, the actual aggregate throughput is typically close to the data rate.
• C. Be careful to ensure the capabilities of the wireless clients match those of the access points, in order to achieve higher throughput.
• D. Reducing the duty cycles of the wireless media by generating fewer beacons may improve throughput.
• E. A wireless device labelled as 300 Mbps should be expected to provide a throughput of 300Mbps.