Fortinet Network Security Expert 8 Written Exam (NSE8 810 - FortiOS 5.6)

Here you have the best Fortinet NSE8_810 practice exam questions

You have 60 total questions to study from
Each page has 5 questions, making a total of 12 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 19, 2025
This site is not affiliated with or endorsed by Fortinet.

Question 1 of 60

Click the Exhibit button.
You are working on an entry level model FortiGate that has been configured in flow-based inspection mode with various settings optimized for performance. It default. Your customer has found that some virus samples are not being appears that the main Internet firewall policy is using the antivirus profile labelled caught by the FortiGate.
Referring to the exhibit, what is causing the problem?
set default-db configuration was set to extreme.

The set options scan configuration items should have been changed to set options scan avmonitor.

The

The default AV profile was modified to use quick scan-mode. mobile-malware-db configuration was set to enable.

The

Correct Answer: C

Question 2 of 60

Click the Exhibit button.
Exam NSE8_810: Question 2 - Image 1

Referring to the exhibit, which two statements are true? (Choose two.)

port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.

LAG-1 and LAG-2 should be connected to a single 4-port 802.3ad interface on the FortiGate-A.

LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802.3ad trunk on another device.

LAG-1 and LAG-2 should be connected to a 4-port single 802.3ad trunk on another device.

Correct Answer: B, C

Question 3 of 60

Click the Exhibit button.
You created a custom health-check for your FortiWeb deployment.
Referring to the output shown in the exhibit, which statement is true?

The FortiWeb must receive an RST packet from the server.

The FortiWeb must receive an HTTP 200 response code from the server.

The FortiWeb must receive an ICMP Echo Request from the server.

The FortiWeb must match the hash value of the page index html.

Correct Answer: B, C

Question 4 of 60

A company has just deployed a new FortiMail in gateway mode. The administrator is asked to strengthen e-mail protection by applying the policies shown below.
-E-mail can only be accepted if a valid e-mail account exists.
-Only authenticated users can send e-mails out.
Which two actions will satisfy the requirements? (Choose two.)

Configure recipient address verification.

Configure inbound recipient policies.

Configure outbound recipient policies.

Configure access control rules.

Correct Answer: A, D

Question 5 of 60

Click the Exhibit button.
Exam NSE8_810: Question 5 - Image 1

Your company has two data centers (DC) connected using a Layer 3 network. Servers in farm A need to connect to servers in farm B as though they all were in the same Layer 2 segment. What would be configured on the FortiGates on each DC to allow such connectivity?

Create an IPsec tunnel with transport-mode encapsulation.

Create an IPsec tunnel with tunnel-mode encapsulation.

Create an IPsec tunnel with VXLAN encapsulation.

Create an IPsec tunnel with VLAN encapsulation.

Correct Answer: C