Fortinet NSE8_812 Online Practice Questions and Exam Preparation

Fortinet NSE8_812 Online Questions & Answers

• Question 101:

  Refer to the exhibits.

  

  You are configuring a Let's Encrypt certificate to enable SSL protection to your website. When FortiWeb tries to retrieve the certificate, you receive a certificate status failed, as shown below.

  

  Based on the Server Policy settings shown in the exhibit, which two configuration changes will resolve this issue? (Choose two.)

  A. Disable Redirect HTTP to HTTPS in the Server Policy.
  B. Remove the Web Protection Profile from this Server Policy.
  C. Enable HTTP service in the Server Policy.
  D. Configure a TXT record of the domain and point to the IP address of the Virtual Server.
  A. Disable Redirect HTTP to HTTPS in the Server Policy.
  B. Remove the Web Protection Profile from this Server Policy.

• Question 102:

  Refer to the exhibit.

  

  A customer needs to create a multi-tier MCLAG set up with the topology as shown in the exhibit.

  A1/A2 B1/B2 C1/C2

  Which command snippet should be applied to it, to allow active/active links in this topology?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 103:

  An administrator discovers that CPU utilization of a FortiGate-200F is high and determines that no traffic is being accelerated by hardware. Why is no traffic being accelerated by hardware?

  A. Oper-session-accounting is enabled under np6xlite config.
  B. strict-dirty-session-check is enabled in global config.
  C. check-protocol-header is set to strict in the global config.
  D. delay-tcp-npu-session is enabled under the firewall policy.
  C. check-protocol-header is set to strict in the global config.

• Question 104:

  An administrator has configured a FortiGate device to authenticate SSL VPN users using digital certificates. A FortiAuthenticator is the certificate authority (CA) and the OCSP server. Part of the FortiGate configuration is shown below:

  

  Based on this configuration, which authentication scenario will FortiGate deny?

  A. The user certificate does not contain the OCSP URL.
  B. FortiAuthenticator responds to an OCSP request that the user certificate authority is untrusted.
  C. FortiAuthenticator responds to an OCSP request that the user certificate status is unknown.
  B. FortiAuthenticator responds to an OCSP request that the user certificate authority is untrusted.

• Question 105:

  Refer to the exhibits.

  

  

  The exhibits show a FortiGate network topology and the output of the status of high availability on the FortiGate. Given this information, which statement is correct?

  A. The ethertype values of the HA packets are 0x8890, 0x8891, and 0x8892
  B. The cluster mode can support a maximum of four (4) FortiGate VMs
  C. The cluster members are on the same network and the IP addresses were statically assigned.
  D. FGVMEVLQOG33WM3D and FGVMEVGCJNHFYI4A share a virtual MAC address.
  C. The cluster members are on the same network and the IP addresses were statically assigned.