Fortinet
NSE8_812 · Question #108
NSE8_812 Question #108: Real Exam Question with Answer & Explanation
Sign in or unlock NSE8_812 to reveal the answer and full explanation for question #108. The question stem and answer options stay visible for context.
Question
You have deployed several perimeter FortiGate devices with internal segmentation FortiGate devices behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGate device only. Which two actions will reduce the number of these log messages? (Choose two.)
Options
- ADisable DNS events logging in FortiGate in the config log fortianalyzer filter section.
- BApply an application control profile to the perimeter FortiGate devices that does not inspect DNS traffic to the outbound firewall policy.
- CRemove DNS signatures from the IPS profile applied to the outbound firewall policy.
- DConfigure the internal FortiGate devices to communicate to FortiGuard using port 8888.
Unlock NSE8_812 to see the answer
You've previewed enough free NSE8_812 questions. Unlock NSE8_812 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.