PassLeader just published the NEWEST Fortinet NSE8 exam dumps! And, PassLeader offer two types of the NSE8 dumps — NSE8 VCE dumps and NSE8 PDF dumps, both VCE and PDF contain the NEWEST NSE8 exam questions, they will help you PASSING the Fortinet NSE8 exam easily! Now, get the NEWEST NSE8 dumps in VCE and PDF from PassLeader — http://www.passleader.com/nse8.html (70 Q&As Dumps)
What’s more, part of that PassLeader NSE8 dumps now are free — https://drive.google.com/open?id=0B-ob6L_QjGLpN0wyemxuQTI1UTA
QUESTION 1
Referring to the exhibit, which statement is true?
A. The packet failed the HMAC validation.
B. The packet did not match any of the local IPsec SAs.
C. The packet was protected with an unsupported encryption algorithm.
D. The IPsec negotiation failed because the SPI was unknown.
Answer: A
QUESTION 2
A cafe offers free Wi-Fi. Customers’ portable electronic devices often do not have antivirus software installed and may be hosting worms without their knowledge. You must protect all customers from any other customers’ infected devices that join the same SSID. Which step meets the requirement?
A. Enable deep SSH inspection with antivirus and IPS.
B. Use a captive portal to redirect unsecured connections such as HTTP and SMTP to their secured equivalents, preventing worms on infected clients from tampering with other customer traffic.
C. Use WPA2 encryption and configure a policy on FortiGate to block all traffic between clients.
D. Use WPA2 encryption, and enable “Block lntra-SSID Traffic”.
Answer: B
QUESTION 3
You are asked to establish a VPN tunnel with a service provider using a third-party VPN device. The service provider has assigned subnet 30.30.30.0/24 for your outgoing traffic going towards the services hosted by the provider on network 20.20.20.0/24. You have multiple computers which will be accessing the remote services hosted by the service provider. Which three configuration components meet these requirements? (Choose three.)
A. Configure an IP Pool of type Overload for range 30.30.30.10-30.30.30.10.
Enable NAT on a policy from your LAN forwards the VPN tunnel and select that pool.
B. Configure IPsec phase 2 proxy IDs for a source of 10.10.10.0/24 and destination of 20.20.20.0/24.
C. Configure an IP Pool of Type One-to-One for range 30.30.30.10-30.30.30.10.
Enable NAT on a policy from your LAN towards the VPN tunnel and select that pool.
D. Configure a static route towards the VPN tunnel for 20.20.20.0/24.
E. Configure IPsec phase 2 proxy IDs for a source of 30.30.30.0/24 and destination of 20.20.20.0/24.
Answer: C
QUESTION 4
You verified that application control is working from previous configured categories. You just added Skype on blocked signatures. However, after applying the profile to your firewall policy, clients running Skype can still connect and use the application. What are two causes of this problem? (Choose two.)
A. The application control database is not updated.
B. SSL inspection is not enabled.
C. A client on the network was already connected to the Skype network and serves as relay prior to configuration changes to block Skype.
D. The FakeSkype.botnet signature is included on your application control sensor.
Answer: AB
QUESTION 5
Given the following FortiOS 5.2 commands:
Which vulnerability is being addresses when managing FortiGate through an encrypted management protocol?
A. Remote Exploit Vulnerability in Bash (ShellShock)
B. Information Disclosure Vulnerability in OpenSSL (Heartbleed)
C. SSL v3 POODLE Vulnerability
D. SSL/TLS MITM vulnerability (CVE-2014-0224)
Answer: C
Learning the PassLeader NSE8 dumps with VCE and PDF for 100% passing Fortinet certification — http://www.passleader.com/nse8.html (70 Q&As Dumps)
BONUS!!! Download part of PassLeader NSE8 dumps for free — https://drive.google.com/open?id=0B-ob6L_QjGLpN0wyemxuQTI1UTA