Free Fortinet NSE8_813 Practice Test & Real Exam Questions

Refer to the exhibit.

The FortiAP profile used by the FortiGate managed AP is shown in the exhibit.
Which two statements in this scenario are correct? (Choose two.)

Your FortiGate has multiple CPUs. You want to verify the load for each CPU. Which two commands will accomplish this task? (Choose two.)

A customer would like to improve the performance of a FortiGate VM running in an Azure D4s_v3 instance, but they already purchased a BYOL VM04 license. Which two actions will improve performance the most without making a FortiGate license change? (Choose two.)

You are asked to establish a VPN tunnel with a service provider using a third-party VPN device.
The service provider has assigned subnet 30.30.30.0/24 for your outgoing traffic going towards the services hosted by the provider on network 20.20.20.0/24.
You have multiple computers which will be accessing the remote services hosted by the service provider.
Which three configuration components meet these requirements? (Choose three.)

Refer to the exhibit.

You need to apply the security features listed below to the network shown in the exhibit.
* High grade DDoS protection
* Web security and load balancing for Server 1 and Server 2
* Solution must be PCI DSS compliant
* Enhanced security to DNS 1 and DNS 2
What are three solutions for this scenario? (Choose three.)

An automation stitch was configured using an incoming webhook as the trigger named
'my_incoming_webhook'.
The action is configured to execute the CLI Script shown:

The base Curl command starts with: curl -k -X POST -H 'Authorization: Bearer '
--data <data> <url>
Which Curl command will successfully work with the configured automation stitch?

Refer to the exhibit.

A customer wants to automate the creation and configuration of FortiGate VM instances in a VMware vCenter environment using Terraform. They have the creation part working with the code shown in the exhibit.
Which code snippet will allow Terraform to automatically connect to a newly deployed FortiGate if its IP was dynamically assigned by VMware NSX-T?

Refer to the exhibit.

Only users authenticated in FortiGate-B can reach the server. A customer wants to deploy a single sign-on solution for IPsec VPN users. Once a user is connected and authenticated to the VPN in FortiGate-A, the user does not need to authenticate again in FortiGate-B to reach the server.
Referring to the exhibit, which two actions satisfy this requirement? (Choose two.)

Refer to the exhibit.

You configured AV and Web filtering for your outgoing Internet connections. You later notice that not all Web sessions are being inspected and you start troubleshooting the problem.
Referring to the exhibit, what can be causing this problem?

You want to enable traffic between 2001:db8:1::/64 and 2001:db8:2::/64 over the public 1Pv4 Internet. Given the CLI configuration shown on the exhibit, which two additional settings are required on this device to implement tunneling for the 1Pv6 transition? (Choose two.)

Refer to the exhibit showing a firewall policy configuration.
Policies

To prevent unauthorized access of their cloud assets, an administrator wants to enforce authentication on firewall policy ID 1.
What change does the administrator need to make?

Regarding tunnel-mode SSL VPN, which three statements are correct? (Choose three.)

You are creating the CLI script to be used on a new SD-WAN deployment. You will have branches with a different number of internet connections and want to be sure there is no need to change the Performance SLA configuration in case more connections are added to the branch.
The current configuration is:

Which configuration do you use for the Performance SLA members?

You notice that memory usage is high and FortiGate has entered conserve mode.
You want FortiGate's IPS engine to focus only on exploits and attacks that are applicable to your specific network.
Which two steps would you take to reduce RAM usage without weakening security? (Choose two.)

Which two features are supported only by FortiMail but not by FortiGate? (Choose two.)