Fortinet NSE8 Actual Free Exam Questions & Community Discussion

  • Exam Code/Number: NSE8
  • Exam Name/Title: Fortinet Network Security Expert 8 Written Exam (NSE8 801 - FortiOS 5.2)
  • Certification Provider: Fortinet
  • Corresponding Certification: Network Security
  • Exam Questions: 65
  • Updated On: Aug 11, 2026
Referring to the diagram shown on the exhibit, you deployed VRRP load balancing using two FortiGate
units and two VRRP groups with a VRRP virtual MAC address enabled on both FortiGate's port2 interface.
During normal operation, both FortiGate units are processing traffic and the VRRP groups are used to
load balance the traffic between the two FortiGate units.
If FortiGate unit A fails, what would happen?
Correct Answer: B Vote an answer
Your NOC contracts the security team due to a problem with a new application flow. You are instructed to
disable hardware acceleration for the policy shown in the exhibit for troubleshooting purposes.
Which command will disable hardware acceleration for the new application policy?

A:

B:

C:

D:
Correct Answer: B Vote an answer
The SECOPS team in your company has started a new project to store all logging data in a disaster
recovery center. All FortiGates will log to a secondary FortiAnalyzer and establish a TCP session to send
logs to the syslog server.
Which two configurations will achieve this goal? (Choose two.)
A:

B:

C:

D:
Correct Answer: C,D Vote an answer
Your company uses a cluster of two FortiGate 3600C units in active-passive mode to protect the
corporate network. The FortiGate cluster sends its logs to a FortiAnalyzer and you have configured
scheduled weekly reports for the Internet bandwidth usage of each corporate VLAN. During a scheduled
maintenance window, you make a series of configuration changes. When the next FortiAnalyzer weekly
report is generated, you notice that Internet bandwidth usage reported by the FortiAnalyzer is far less than
expected.
What is the reason for this discrepancy?
Correct Answer: B Vote an answer
You verified that application control is working from previous configured categories. You just added Skype
on blocked signatures. However, after applying the profile to your firewall policy, clients running Skype
can still connect and use the application.
What are two causes of this problem? (Choose two.)
Correct Answer: B,D Vote an answer
Which command syntax would you use to configure the serial number of a FortiGate as its host name?
A:

B:

C:

D:
Correct Answer: C Vote an answer
Referring to the command output shown on the exhibit, how many hosts are connected to the FortiGate?
Correct Answer: A Vote an answer
0
0
0
10