Fortinet NSE8_812 Online Practice Questions and Exam Preparation

Fortinet NSE8_812 Online Questions & Answers

• Question 91:

  Refer to the exhibits.

  

  You must integrate a FortiMail and FortiSandbox Enhanced Cloud solution for a customer who is concerned about the e-mails being delayed for too long. According to the configuration shown in the exhibits, which would be an expected behavior?

  A. FortiMail will relay valid e-mails to the mail server as soon as it is done with other local inspections.
  B. If an attachment is sent to the FortiSandbox while the job queue is full, the e-mail might be delayed for up to 30 minutes, then e-mail will be relayed to the mail server.
  C. FortiMail will not wait for results but only for attachments that have been already submitted to the FortiSandbox in the last 60 minutes.
  D. FortiMail will ignore the timeout value if content disarm and reconstruction (CDR) is enabled.
  A. FortiMail will relay valid e-mails to the mail server as soon as it is done with other local inspections.

• Question 92:

  Refer to the exhibits.

  

  An administrator has configured a FortiGate and Forti Authenticator for two-factor authentication with FortiToken push notifications for their SSL VPN login. Upon initial review of the setup, the administrator has discovered that the customers can manually type in their two-factor code and authenticate but push notifications do not work

  Based on the information given in the exhibits, what must be done to fix this?

  A. On FG-1 port1, the ftm access protocol must be enabled.
  B. FAC-1 must have an internet routable IP address for push notifications.
  C. On FG-1 CLI, the ftm-push server setting must point to 100.64.141.
  D. On FAC-1, the FortiToken public IP setting must point to 100.64.1 41
  D. On FAC-1, the FortiToken public IP setting must point to 100.64.1 41

• Question 93:

  A FortiGate must be configured to accept VoIP traffic which will include session initiation protocol (SIP) traffic. Which statement about the VoIP configuration options is correct?

  A. Restricting SIP requests is only possible when using the SIP Session Helper.
  B. Rate tracking of SIP requests is only possible when the application layer gateway (ALG) is set to Flow mode.
  C. FortiOS cannot accept SIP traffic if both the SIP Session Helper and the application layer gateway (ALG) are disabled.
  D. By default, VoIP traffic will be processed using the SIP Session Helper.
  C. FortiOS cannot accept SIP traffic if both the SIP Session Helper and the application layer gateway (ALG) are disabled.

• Question 94:

  Refer to the CLI configuration of an SSL inspection profile from a FortiGate device configured to protect a web server:

  

  Based on the information shown, what is the expected behavior when an HTTP/2 request comes in?

  A. FortiGate will reject all HTTP/2 ALPN headers.
  B. FortiGate will strip the ALPN header and forward the traffic.
  C. FortiGate will rewrite the ALPN header to request HTTP/1.
  D. FortiGate will forward the traffic without modifying the ALPN header.
  B. FortiGate will strip the ALPN header and forward the traffic.

• Question 95:

  Refer to the exhibits.

  

  The exhibits show the configuration and debug output from a FortiGate Public SDN Connector. What is a possible reason for this dynamic address object to be empty?

  A. The Application ID is incorrect.
  B. The Client secret is incorrect.
  C. The App registration does not have a role with necessary read permissions on the resource group.
  D. The resource group NSE8-Lab does not exist.
  C. The App registration does not have a role with necessary read permissions on the resource group.

• Question 96:

  Refer to the exhibit, which shows the high availability configuration for the FortiAuthenticator (FAC1).

  

  Based on this information, which statement is true about the next FortiAuthenticator (FAC2) member that will join an HA cluster with this FortiAuthenticator (FAC1)?

  A. FAC2 can only process requests when FAC1 fails.
  B. FAC2 can have its HA interface on a different network than FAC1.
  C. The FortiToken license will need to be installed on the FAC2.
  D. FSSO sessions from FAC1 will be synchronized to FAC2.
  B. FAC2 can have its HA interface on a different network than FAC1.

• Question 97:

  Which two statements about bounce address tagging and verification (BATV) on FortiMail are true? (Choose two.)

  A. You must publish the BATV public key as a DNS TXT record.
  B. Emails with an empty sender address will be subjected to bounce verification.
  C. FortiMail will insert the BATV tag to the sender address in the envelope.
  D. BATV will use symmetric keys to verify the bounce address tag.
  B. Emails with an empty sender address will be subjected to bounce verification.
  C. FortiMail will insert the BATV tag to the sender address in the envelope.

• Question 98:

  Refer to the exhibit.

  

  A customer is trying to setup a Playbook automation using a FortiAnalyzer, FortiWeb and FortiGate. The intention is to have the FortiGate quarantine any source of SQL Injection detected by the FortiWeb. They got the automation stitch to trigger on the FortiGate when simulating an attack to their website, but the quarantine object was created with the IP 0.0.0.0. Referring to the configuration and logs in the exhibits, which two statements are true? (Choose two.)

  A. The Group By option in the handler should be different to src, so src can be used on the Playbook configuration.
  B. FortiSOC Playbooks combining FortiWeb and FortiGate are not supported.
  C. To diagnose this issue, you need to use the commanddiagnose test application oftpd 22.
  D. The FortiAnalyzer ADOM Type must be Fabric.
  E. To fix the issue the parameter for script on the Playbook configuration should be epip.
  A. The Group By option in the handler should be different to src, so src can be used on the Playbook configuration.
  D. The FortiAnalyzer ADOM Type must be Fabric.

• Question 99:

  Refer to the exhibit.

  

  You are managing a FortiSwitch 3032E that is managed by FortiLink on a FortiGate 3960E. The 3032E is heavily utilized and there is only one port free.

  The requirement is to add an additional three FortiSwitch 448E devices with 10Gbps SFP+ connectivity directly to the 3032E. The plan is to use split port (phy-mode) with QSFP28 mode to connect the new 448E switches.

  In this scenario, which statement about the switch deployment is correct?

  A. Additional ports on Switch 1 can be split for a maximum of 128 interfaces.
  B. The port most of Switch 1 must be changed to QSFP.
  C. After enabling split ports and rebooting Switch 1, the new ports can be configured from the FortiGate.
  D. Switches 2-4 will connect successfully with Switch 1 split port in QSFP28 mode.
  B. The port most of Switch 1 must be changed to QSFP.

• Question 100:

  You must analyze an event that happened at 20:37 UTC. One log relevant to the event is extracted from FortiGate logs:

  

  The devices and the administrator are all located in different time zones Daylight savings time (DST) is disabled

  1. The FortiGate is at GMT-1000.

  2. The FortiAnalyzer is at GMT-0800

  3. Your browser local time zone is at GMT-03.00

  You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?

  A. 20:37:08
  B. 10:37:08
  C. 17:37:08
  D. 12.37:08
  D. 12.37:08