NSE8_811

NSE8_811 practice questions, page 3 of 3, with answer review and explanations.

Question 11

Refer to the exhibit. A FortiGate is configured for a dial-up IPsec VPN to allow multiple remote FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of them can be connected at a time. If site B tries to connect while site A is connected, site A is disconnected. The IKE real-time debug shows the output in the exhibit when site A is disconnected. Referring to the exhibit, which configuration setting should be executed in the dial-up configuration to allow both VPNs to be connected at the same time?

  1. set route-overlap allow
  2. set single-source disable
  3. set enforce-unique-id disable
  4. set add-route enable

Question 12

A customer wants to enable SYN flood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet from a new source IP address. Which SYN flood mitigation mode must the customer use?

  1. SYN retransmission
  2. SYN/ACK cookie
  3. SYN cookie
  4. ACK cookie