Fortinet NSE8_812 Online Practice Questions and Exam Preparation

Fortinet NSE8_812 Online Questions & Answers

• Question 21:

  Refer to the exhibit.

  

  You have deployed a security fabric with three FortiGate devices as shown in the exhibit. FGT_2 has the following configuration:

  

  FGT_1 and FGT_3 are configured with the default setting. Which statement is true for the synchronization of fabric-objects?

  A. Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate.
  B. Objects from the root FortiGate will only be synchronized to FGT__2.
  C. Objects from the root FortiGate will not be synchronized to any downstream FortiGate.
  D. Objects from the root FortiGate will only be synchronized to FGT_3.
  D. Objects from the root FortiGate will only be synchronized to FGT_3.

• Question 22:

  Refer to the exhibits.

  

  During the implementation of a Fortinet Security Fabric configuration, CLI commands were issued in the order shown in the exhibit. On the next day, the local admin for FGTC issues the following command:

  

  FGTC # config system csf set configuration-sync default end In this scenario, which outcome is true regarding the "subnet_1" firewall address object on FGTC?

  A. The object will only be automatically created on FGTC if it is modified on FGTA-1.
  B. The object needs to be recreated on FGTA-1 before it is automatically created on FGTC.
  C. The object is not automatically created.
  D. The object is automatically created.
  D. The object is automatically created.

• Question 23:

  Refer to the exhibit.

  

  A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be integrated with FortiOS and there is an Active Directory server. Given the configuration shown in the exhibit, which two statements about the installation are correct? (Choose two.)

  A. If no client update time is specified on EMS, the user will be able to choose the time of installation if they wish to delay.
  B. A client can be eligible for multiple enabled configurations on the EMS server, and one will be chosen based on first priority
  C. You can only deploy initial installations to Windows clients.
  D. You must use Standard or Enterprise SQL Server rather than the included SQL Server Express
  E. The Windows clients only require "File and Printer Sharing0 allowed and the rest is handled by Active Directory group policy
  B. A client can be eligible for multiple enabled configurations on the EMS server, and one will be chosen based on first priority
  C. You can only deploy initial installations to Windows clients.

• Question 24:

  Refer to the exhibits.

  

  A customer is trying to restore a VPN connection configured on a FortiGate. Exhibits show output during a troubleshooting session when the VPN was working and the current baseline VPN configuration.

  

  Which configuration parameters will restore VPN connectivity based on the diagnostic output?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 25:

  On a FortiGate Configured in Transparent mode, which configuration option allows you to control Multicast traffic passing through the?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 26:

  An automation stitch was configured using an incoming webhook as the trigger named 'my_incoming_webhook'. The action is configured to execute the CLI Script shown:

  

  A. data: `{ "hostname": "bad_host_1", "ip": ["1.1.1.1"]}' url: http://192.168.226.129/api/v2/monitor/system/automation- stitch/webhook/my_incoming_webhook
  B. data: `{ "hostname": "bad_host_1", "ip": "1.1.1.1"}' url: http://192.168.226.129/api/v2/monitor/system/automation- stitch/webhook/my_incoming_webhook
  C. data: `{ "hostname": "bad_host_1", "ip": ["1.1.1.1"]}' url: http://192.168.226.129/api/v2/cmdb/system/automation- stitch/webhook/my_incoming_webhook
  D. data: `{ "hostname": "bad_host_1", "ip": "1.1.1.1"}' url:http://192.168.226.129/api/v2/cmdb/system/automation- stitch/webhook/my_incoming_webhook
  A. data: `{ "hostname": "bad_host_1", "ip": ["1.1.1.1"]}' url: http://192.168.226.129/api/v2/monitor/system/automation- stitch/webhook/my_incoming_webhook

• Question 27:

  A remote IT Team is in the process of deploying a FortiGate in their lab. The closed environment has been configured to support zero-touch provisioning from the FortiManager, on the same network, via DHCP options. After waiting 15 minutes, they are reporting that the FortiGate received an IP address, but the zero-touch process failed.

  The exhibit below shows what the IT Team provided while troubleshooting this issue:

  

  Which statement explains why the FortiGate did not install its configuration from the FortiManager?

  A. The FortiGate was not configured with the correct pre-shared key to connect to the FortiManager
  B. The DHCP server was not configured with the FQDN of the FortiManager
  C. The DHCP server used the incorrect option type for the FortiManager IP address.
  D. The configuration was modified on the FortiGate prior to connecting to the FortiManager
  D. The configuration was modified on the FortiGate prior to connecting to the FortiManager

• Question 28:

  You are troubleshooting a FortiMail Cloud service integrated with Office 365 where outgoing emails are not reaching the recipients' mail What are two possible reasons for this problem? (Choose two.)

  A. The FortiMail access control rule to relay from Office 365 servers FQDN is missing.
  B. The FortiMail DKIM key was not set using the Auto Generation option.
  C. The FortiMail access control rules to relay from Office 365 servers public IPs are missing.
  D. A Mail Flow connector from the Exchange Admin Center has not been set properly to the FortiMail Cloud FQDN.
  A. The FortiMail access control rule to relay from Office 365 servers FQDN is missing.
  C. The FortiMail access control rules to relay from Office 365 servers public IPs are missing.

• Question 29:

  Refer to the exhibit.

  

  A customer reports that they are not able to reach subnet 10.10.10.0/24 from their FortiGate device. Based on the exhibit, what should you do to correct the situation?

  A. Enable iBGP multipath
  B. Enable recursive resolution for BGP routes
  C. Enable next-hop-self feature
  D. Enable additional-path feature
  C. Enable next-hop-self feature

• Question 30:

  Refer to The exhibit, which shows a topology diagram.

  

  A customer wants to use SD-WAN for traffic generated from the data center towards Branches. SD-WAN on HUB should follow the underlay condition on each Branch and the solution should be scalable for hundreds of Branches. Which SD WAN-Rules strategy should be used?

  A. Manual based on route-tags
  B. Lowest Cost SLA
  C. Auto based on link quality
  D. Best Quality based on route-tags
  D. Best Quality based on route-tags