We're so confident of our products that we provide no hassle product exchange.
Fortinet NSE8_811 Exam Overview:
| Certification Vendor: | Fortinet |
|---|---|
| Exam Name: | Fortinet NSE 8 Written Exam (NSE8_811) |
| Exam Number: | NSE8_811 |
| Real Exam Qty: | 60 |
| Available Languages: | English |
| Exam Format: | Multiple Select, Multiple Choice, With exhibits/diagrams/config extracts, Scenario-based |
| Certificate Validity Period: | 3 years after full certification |
| Related Certifications: | NSE 8 Practical Exam |
| Exam Price: | 400 USD |
| Exam Duration: | 120 minutes |
| Passing Score: | Pass/Fail, no exact score published; 100% correct answers required per question |
| Recommended Training: | Fortinet NSE 8 Preparation Resources |
| Exam Registration: | Pearson VUE Registration Fortinet NSE 8 Program Page |
| Sample Questions: | Fortinet NSE8_811 Sample Questions |
| Exam Way: | In-person at Pearson VUE test centers or online proctored via Pearson VUE OnVUE |
| Pre Condition: | No formal prerequisites; recommended NSE 4–7 knowledge and 5+ years of enterprise security experience; must pass written exam before taking NSE 8 Practical Exam |
| Official Syllabus URL: | https://training.fortinet.com/local/staticpage/view.php?page=nse_8_staging |
Fortinet NSE8_811 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Security Fabric & Multi-Product Integration | 25% | - FortiAuthenticator, FortiToken identity management - FortiSandbox, FortiDDoS threat protection - FortiSwitch, FortiAP secure access integration - FortiManager, FortiAnalyzer central management |
| Topic 2: SD-WAN & Wide Area Networking | 20% | - Security enforcement over SD-WAN - Hybrid WAN, internet/MPLS/5G integration - SD-WAN rule design, SLAs, load balancing |
| Topic 3: Advanced Security & Threat Prevention | 20% | - Advanced threat protection, zero-trust architecture - Logging, reporting, compliance design - IPS, application control, web filtering |
| Topic 4: Design & Troubleshooting for Complex Networks | 10% | - Diagnosis & resolution of complex issues - End-to-end secure network design |
| Topic 5: Advanced FortiGate Architecture & Deployment | 25% | - High Availability (FGCP/FGSP) & clustering - NPU offloading, performance tuning, kernel debugging - Advanced routing: BGP, OSPF, VRF, route redistribution - Complex NAT, IPsec VPN, SSL VPN design |
Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:
Click the Exhibit button.
Your customer is using dynamic routing to exchange the default route between two FortiGates using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below:
According to the exhibit, what is causing the problem?
- A. FG2 is within the wrong OSPF area.
- B. There is an OSPF interface network-type mismatch.
- C. A prefix for the detail route is missing
- D. OSPF requires the redistribution of connected networks.
Correct Answer: B 🗳️
Click the exhibit button.
A FortiGate device is configured to authenticate SSL VPN users using digital certificates. Part of the FortiGate configuration is shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)
- A. The authentication will fail if the certificate does not contain user principle name (UPN) information.
- B. The authentication will fail if the user certificate does not contain the CA_Cert string in the Failed.
- C. The authentication will fail if the OCSP server is down.
- D. OCSP is used to verify that the user-signed certificate has not expired.
Correct Answer: A,C 🗳️
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
Exhibit
Click the Exhibit button.
You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options. Referring to the exhibit, which statement is correct in this situation?
- A. The FortiGate model being used does not support LAG.
- B. The FortiGate interfaces are defective and require replacement.
- C. The FortiGate SFP+ slot does not have the correct module.
- D. The FortiGate model does not have an Integrated Switch Fabric (ISF).
Correct Answer: D 🗳️
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
You are building a FortiGala cluster which is stretched over two locations. The HA connections for the cluster are terminated on the data centers. Once the FortiGates have booted, they do form a cluster. The network operators inform you that CRC eoors are present on the switches where the FortiGAtes are connected.
What would you do to solve this problem?
- A. Replace the caables where the CRC errors occur.
- B. Change the ethertype for the HA packets.
- C. Place the HA interfaces in dedicated VLANs.
- D. Set the speedduplex setting to 1 Gbps /Full Duplex.
Correct Answer: B 🗳️
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
Refer to the exhibit.
The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
* 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
* The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)
- A. Configure the master FortiGate with one LAG and FortiLink split interface disabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
- B. Configure both FortiSwitch devices as peers with ISL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
- C. Configure both FortiSwitch devices as peers with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
- D. Configure the master FortiGate with one LAG and FortiLink split interface enabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
Correct Answer: A,C 🗳️
Viewing page 1 out of 13 pages.
Viewing questions 1-5 out of 65 questions.
By Susie
