Fortinet NSE8_812 Online Practice Questions and Exam Preparation

Fortinet NSE8_812 Online Questions & Answers

• Question 1:

  Refer to the exhibit, which shows a Branch1 configuration and routing table. In the SD-WAN implicit rule, you do not want the traffic load balance for the overlay interface when all members are available.

  

  In this scenario, which configuration change will meet this requirement?

  A. Change the load-balance-mode to source-ip-based.
  B. Create a new static route with the internet sdwan-zone only
  C. Configure the cost in each overlay member to 10.
  D. Configure the priority in each overlay member to 10.
  D. Configure the priority in each overlay member to 10.

• Question 2:

  Refer to the exhibit.

  

  To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked with configuring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.

  Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interface options referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)

  A. set net-device disable
  B. set mode-cfg enable
  C. set ike-version 1
  D. set add-route enable
  E. set mode-cfg-allow-client-selector enable
  B. set mode-cfg enable
  D. set add-route enable
  E. set mode-cfg-allow-client-selector enable

• Question 3:

  A customer with a FortiDDoS 200F protecting their fibre optic internet connection from incoming traffic sees that all the traffic was dropped by the device even though they were not under a DoS attack. The traffic flow was restored after it was rebooted using the GUI. Which two options will prevent this situation in the future? (Choose two)

  A. Change the Adaptive Mode.
  B. Create an HA setup with a second FortiDDoS 200F
  C. Move the internet connection from the SFP interfaces to the LC interfaces
  D. Replace with a FortiDDoS 1500F
  B. Create an HA setup with a second FortiDDoS 200F
  D. Replace with a FortiDDoS 1500F

• Question 4:

  Which two types of interface have built-in active bypass in FortiDDoS devices? (Choose two.)

  A. SFP
  B. LC
  C. QSFP+
  D. Copper
  E. SFP+
  B. LC
  D. Copper

• Question 5:

  You are performing a packet capture on a FortiGate 2600F with the hyperscale licensing installed. You need to display on screen all egress/ingress packets from the port16 interface that have been offloaded to the NP7. Which three commands need to be run? (Choose three.)

  A. diagnose npu sniffer filter intf port16
  B. diagnose npu sniffer filter selector 0
  C. diagnose sniffer packet npudbg
  D. diagnose npu sniffer filter dir 2
  E. diagnose sniffer packet port16
  A. diagnose npu sniffer filter intf port16
  C. diagnose sniffer packet npudbg
  D. diagnose npu sniffer filter dir 2

• Question 6:

  Refer to the exhibit, which shows diagnostic output.

  

  A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?

  A. SD-WAN Rule is matching only DNS traffic.
  B. Port1 is used because it has more available bandwidth.
  C. Traffic is matched by policy route.
  D. Route for the destination IP is missing in the routing table.
  C. Traffic is matched by policy route.

• Question 7:

  Refer to the exhibit.

  

  FortiManager is configured with the Jinja Script under CLI Templates shown in the exhibit.

  Which two statements correctly describe the expected behavior when running this template? (Choose two.)

  A. The Jinja template will automatically map the interface with "WAN" role on the managed FortiGate.
  B. The template will work if you change the variable format to $(WAN).
  C. The template will work if you change the variable format to {{ WAN }}.
  D. The administrator must first manually map the interface for each device with a meta field.
  E. The template will fail because this configuration can only be applied with a CLI or TCL script.
  D. The administrator must first manually map the interface for each device with a meta field.
  E. The template will fail because this configuration can only be applied with a CLI or TCL script.

• Question 8:

  Refer to the exhibit.

  

  The Company Corp administrator has enabled Workflow mode in FortiManager and has assigned approval roles to the current administrators. However, workflow approval does not function as expected. The CTO is currently unable to approve submitted changes.

  Given the exhibit, which two possible solutions will resolve the workflow approval problems with the Workflow_72 ADOM? (Choose two.)

  A. The CTO must have a defined email address for their admin user account.
  B. The CTO and CISO need to swap Approval Groups so that the highest authority is in Group #1.
  C. The CTO must have Standard access level or higher for FortiManager.
  D. The CISO must have a higher access level than "Read_Only_User" in FortiManager.
  E. The CTO needs to be added to "Email Notification" in the Workflow_72 ADOM.
  A. The CTO must have a defined email address for their admin user account.
  C. The CTO must have Standard access level or higher for FortiManager.

• Question 9:

  Refer to the exhibit showing a FortiSOAR playbook.

  

  You are investigating a suspicious e-mail alert on FortiSOAR, and after reviewing the executed playbook, you can see that it requires intervention. What should be your next step?

  A. Go to the Incident Response tasks dashboard and run the pending actions
  B. Click on the notification icon on FortiSOAR GUI and run the pending input action
  C. Run the Mark Drive by Download playbook action
  D. Reply to the e-mail with the requested Playbook action
  A. Go to the Incident Response tasks dashboard and run the pending actions

• Question 10:

  You are creating the CLI script to be used on a new SD-WAN deployment You will have branches with a different number of internet connections and want to be sure there is no need to change the Performance SLA configuration in case more connections are added to the branch.

  The current configuration is:

  

  Which configuration do you use for the Performance SLA members?

  A. set members any
  B. set members 0
  C. current configuration already fulfills the requirement
  D. set members all
  B. set members 0