NSE8_810 Free Practice Test

You have a customer experiencing problem with a legacy L3L4 firewall device and IPV6 SIP VoIP traffic. They devices is dropping SIP packets, consequently, it process SIP voice calls. Which solution would solve the customer's problem?

1. A. Deploy a FortiVoice and enable IPv6 SIP.
2. B. Replace their legacy device with a FortiGate and configure it to extract information from the body of the IPv6 packet.
3. C. Deploy a FotiVoice and enable an IPv6 SIP session helper.
4. D. Replace their legacy device with a FortiGate and deploy a FortiVoice to extract information from the body of the IPv6 SIP packet

Correct Answer: A

Exhibit
<>>

1. A. Use Kerberos authentication.
2. B. FortiGate-A must generate a RADUIS accounting packets.
3. C. Use FortiAuthenticator.
4. D. Use the Collector Agen

Correct Answer: CD

You have a customer with a SCADA environmental control devices that is trigged a false-positive OPS alert whenever the device's Web GUI is accessed. You cannot seem to create a functional custom IPS filter expert this behavior, and it appears that the device is so old that it does HTTPS support. You need to prevent the false posited IPS alert occurring. In this scenario, which two actions would accomplish this task? (Choose two.)

1. A. Create a very granular firewall for that device\'s IP address which does not perform IPS scanning.
2. B. Reconfigure the FortiGate to operate in proxy-based inspection mode instead of flow-base
3. C. Create a URL filter with the exempt action for that device\'s IP address.
4. D. Change the relevant firewall policies to use SSL certificate-inspection instead of SSL deep-inspectio

Correct Answer: BC

Exhibit
<>>

1. A. Layer 2
2. B. Layer 3
3. C. Laye.4
4. D. Layer 7

Correct Answer: D

Exhibit
<>

1. A. Set the set ip 10.10.10. i command to vlink2l.
2. B. Set type ppp to the vdom-link, vlink2.
3. C. Set the not ip 10.I0.I0.1 command to vlink20.
4. D. Set type ethernet to the vdom-link, vlink2.

Correct Answer: AC