Fortinet NSE8_811 Exam Questions & Answers

Consider the following VDOM configuration:

In which two ways can you establish communication between an existing NAT VDOM and a new transparent VDOM? (Choose two.)

A. Set the set ip 10.10.10.1 command to vlink2l.

B. Set the set ip 10.10.10.1 command to vlink20.

C. Set type ppp to the vdom-link, vlink2.

D. Set type ethernet to the vdom-link, vlink2.

Anti-Virus Real-Time Protection is enabled without any exclusions.

Referring to the exhibit, which two behaviors will the FortiClient endpoint have after receiving the profile update from the FortiClient EMS? (Choose two.)

A. Access to a downloaded file will always be allowed after 60 seconds when the FortiSandbox is reachable.

B. The user will not be able to access a downloaded file for a maximum of 60 seconds if it is not a virus and the FortiSandbox is reachable.

C. Files executed from a mapped network drive will not be inspected by the FortiClient endpoint AntiVirus engine.

D. If the Real-Time Protection does not detect a virus, the user will be able to access a downloaded file when the FortiSandbox is unreachable.

Refer to the exhibit.

You are working on FortiGate 61E operating in flow-based inspection mode with various settings optimized for performance. The main Internet firewall policy is using the "default" antivirus profile. You found that some executable virus samples files downloaded over HTTP are not being blocked by the FortiGate.

Referring to the exhibit, how can this be fixed?

A. Change the set scan-mode configuration to full.

B. Disable the emulator feature.

C. Change the set default-db configuration to extreme.

D. Add set content-disarm enable to the configuration.