Prepare Fortinet NSE8_811 Exam

You configure an outgoing firewall policy with a web filter for accessing the internet. The access to URL https// itacm.co and web belonging to the same category should be blocked. You notice that the Web server presents a certificate with CN=www acme.com. The www.it.acme site is as '' information Technology and the www.acme.com site is categorized as ''Business".

Which statements is correct in this scenario?

Refer to the Exhibit button.

You need to run a script in FortiManager against managed FortiGate devices in your organization to install a configuration for a new static route. Which two scripts will successfully configure the static route on the managed device? (Choose two.)

You deploy a FortiGate device in a remote office based on the requirements shown below.

-- Due to company's security policy, management IP of your FortiGate is not allowed to access the Internet.

-- Apply Web Filtering, Antivirus, IPS and Application control to the protected subnet.

-- Be managed by a central FortiManager in the head office.

Which action will help to achieve the requirements?

Click the Exhibit button.

config system ha

set mode a-a

set group-id 1

set group-name main

set hb_dev port2 100

set session-pickup enable

end

You have configured an HA cluster with two FortiGates. You want to make sure that you are able to manage the individual cluster members directly using port3.

Referring to the exhibit, what are two ways to accomplish this task? (Choose two.)

An old router has been replaced by a FortiWAN device. The FortiWAN has inherited the router's management IP address and now the network administrator needs to remove the old router from the FortiSIEM configuration.

Which two statements are true about this operation? (Choose two.)