Fortinet Network Security Expert 8 Written Exam (NSE8 810 - FortiOS 5.6)

Here you have the best Fortinet NSE8_810 practice exam questions

You have 60 total questions to study from
Each page has 5 questions, making a total of 12 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 30, 2025
This site is not affiliated with or endorsed by Fortinet.

Question 1 of 60

Click the Exhibit button.
You are working on an entry level model FortiGate that has been configured in flow-based inspection mode with various settings optimized for performance. It default. Your customer has found that some virus samples are not being appears that the main Internet firewall policy is using the antivirus profile labelled caught by the FortiGate.
Referring to the exhibit, what is causing the problem?
set default-db configuration was set to extreme.

The set options scan configuration items should have been changed to set options scan avmonitor.

The

The default AV profile was modified to use quick scan-mode. mobile-malware-db configuration was set to enable.

The

Correct Answer: C

Question 2 of 60

Click the Exhibit button.
Exam NSE8_810: Question 2 - Image 1

Your company has two data centers (DC) connected using a Layer 3 network. Servers in farm A need to connect to servers in farm B as though they all were in the same Layer 2 segment. What would be configured on the FortiGates on each DC to allow such connectivity?

Create an IPsec tunnel with transport-mode encapsulation.

Create an IPsec tunnel with tunnel-mode encapsulation.

Create an IPsec tunnel with VXLAN encapsulation.

Create an IPsec tunnel with VLAN encapsulation.

Correct Answer: C

Question 3 of 60

Click the Exhibit button.
You configured an IPsec tunnel to a branch office. Now you want to make sure that the encryption of the tunnel is offloaded to hardware.
Referring to the exhibit, which statement is true?
Exam NSE8_810: Question 3 - Image 1

Incoming and outgoing traffic is offloaded.

Outgoing traffic is offloaded; you cannot determine if incoming traffic is offloaded at this time.

Traffic is not offloaded.

Outgoing traffic is offloaded; incoming traffic not offloaded.

Correct Answer: D

Question 4 of 60

You want to access the JSON API on FortiManager to retrieve information on an object.
In this scenario, which two methods will satisfy the requirement? (Choose two.)

Make a call with the Web browser on your workstation.

Make a call with the SoapUPI API tool on your workstation.

Download the WSDL file from FortiManager administration GUI. curl utility on your workstation.

Make a call with the

Correct Answer: C, D

Question 5 of 60

You have a customer with a SCADA environmental control device that is triggering a false-positive IPS alert whenever the device's Web GUI is accessed. You cannot seem to create a functional custom IPS filter to exempt this behavior, and it appears that the device is so old that it does not have HTTPS support.
You need to prevent the false positive IPS alerts from occuring.
In this scenario, which two actions would accomplish this task? (Choose two.)

Create a very granular firewall policy for that device's IP address which does not perform IPS scanning.

Reconfigure the FortiGate to operate in proxy-based inspection mode instead of flow-based. Exempt action for that device's IP address.

Create a URL filter with the

Change the relevant firewall policies to use SSL certificate-inspection instead of SSL deep-inspection.

Correct Answer: A, D