Fortinet NSE8_812 Online Practice Questions and Exam Preparation

Fortinet NSE8_812 Online Questions & Answers

• Question 31:

  Refer to the exhibit showing an SD-WAN configuration. According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?

  A. port16 and port1
  B. port1 and port1
  C. port16 and port15
  D. port1 and port15
  D. port1 and port15

• Question 32:

  Refer to the exhibit.

  

  You are operating an internal network with multiple OSPF routers on the same LAN segment. FGT_3 needs to be added to the OSPF network and has the configuration shown in the exhibit. FGT_3 is not establishing any OSPF connection. What needs to be changed to the configuration to make sure FGT_3 will establish OSPF neighbors without affecting the DR/BDR election?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  B. Option B

• Question 33:

  Review the VPN configuration shown in the exhibit.

  

  What is the Forward Error Correction behavior if the SD-WAN network traffic download is 500 Mbps and has 8% of packet loss in the environment?

  A. 1 redundant packet for every 10 base packets
  B. 3 redundant packet for every 5 base packets
  C. 2 redundant packet for every 8 base packets
  D. 3 redundant packet for every 9 base packets
  A. 1 redundant packet for every 10 base packets

• Question 34:

  You are deploying a FortiExtender (FEX) on a FortiGate-60F. The FEX will be managed by the FortiGate. You anticipate high utilization. The requirement is to minimize the overhead on the device for WAN traffic. Which action achieves the requirement in this scenario?

  A. Add a switch between the FortiGate and FEX.
  B. Enable CAPWAP connectivity between the FortiGate and the FortiExtender.
  C. Change connectivity between the FortiGate and the FortiExtender to use VLAN Mode
  D. Add a VLAN under the FEX-WAN interface on the FortiGate.
  C. Change connectivity between the FortiGate and the FortiExtender to use VLAN Mode

• Question 35:

  You are responsible for recommending an adapter type for NICs on a FortiGate VM that will run on an ESXi Hypervisor. Your recommendation must consider performance as the main concern, cost is not a factor. Which adapter type for the NICs will you recommend?

  A. Native ESXi Networking with E1000
  B. Virtual Function (VF) PCI Passthrough
  C. Native ESXi Networking with VMXNET3
  D. Physical Function (PF) PCI Passthrough
  D. Physical Function (PF) PCI Passthrough

• Question 36:

  Refer to the exhibit that shows VPN debugging output.

  

  The VPN tunnel between headquarters and the branch office is not being established. What is causing the problem?

  A. The Phase-1 encryption algorithms are not matching.
  B. There is no matching Diffie-Hellman Group.
  C. HQ is using IKE v1 and the branch office is using with IKE v2.
  D. There is a mismatch in the ISAKMP SA lifetime.
  A. The Phase-1 encryption algorithms are not matching.

• Question 37:

  Refer to the exhibits. Exhibit A

  

  Exhibit B

  

  Exhibit C

  

  A customer is trying to set up a VPN with a FortiGate, but they do not have a backup of the configuration. Output during a troubleshooting session is shown in the exhibits A and B and a baseline VPN configuration is shown in Exhibit C Referring to the exhibits, which configuration will restore VPN connectivity?

  

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

• Question 38:

  You must configure an environment with dual-homed servers connected to a pair of FortiSwitch units using an MCLAG.

  Multicast traffic is expected in this environment, and you should ensure unnecessary traffic is pruned from links that do not have a multicast listener.

  In which two ways must you configure the igmps-f lood-traffic and igmps-flood-report settings? (Choose two.)

  A. disable on ICL trunks
  B. enable on ICL trunks
  C. disable on the ISL and FortiLink trunks
  D. enable on the ISL and FortiLink trunks
  B. enable on ICL trunks
  C. disable on the ISL and FortiLink trunks

• Question 39:

  Refer to the exhibit.

  

  Given the exhibit, which two statements about FortiGate FGSP HA cluster behavior are correct? (Choose two.)

  A. You can run FortiGate Virtual Router Redundancy Protocol (VRRP) high availability in addition to FGSP simultaneously.
  B. Session synchronization occurs over Layer 3 by default, and if unavailable it will then try Layer 2.
  C. You can selectively synchronize only specific sessions between FGSP cluster members.
  D. Cluster members will upgrade one at a time and failover during firmware upgrades.
  A. You can run FortiGate Virtual Router Redundancy Protocol (VRRP) high availability in addition to FGSP simultaneously.
  B. Session synchronization occurs over Layer 3 by default, and if unavailable it will then try Layer 2.

• Question 40:

  Refer to the exhibits.

  

  The exhibits show a diagram of a requested topology and the base IPsec configuration.

  A customer asks you to configure ADVPN via two internet underlays. The requirement is that you use one interface with a single IP address on DC FortiGate.

  In this scenario, which feature should be implemented to achieve this requirement?

  A. Use network-overlay id
  B. Change advpn2 to IKEv1
  C. Use local-id
  D. Use peer-id
  A. Use network-overlay id