Fortinet NSE8_812 Online Practice Questions and Exam Preparation

Fortinet NSE8_812 Online Questions & Answers

• Question 61:

  A customer's cybersecurity department needs to implement security for the traffic between two VPCs in AWS, but these belong to different departments within the company. The company uses a single region for all their VPCs.

  Which two actions will achieve this requirement while keeping separate management of each department's VPC? (Choose two.)

  A. Create a transit VPC with a FortiGate HA cluster, connect to the other two using VPC peering, and use routing tables to force traffic through the FortiGate cluster.
  B. Create an 1AM account for the cybersecurity department to manage both existing VPC, create a FortiGate HA Cluster on each VPC and IPSEC VPN to force traffic between the VPCs through the FortiGate clusters
  C. Migrate all the instances to the same VPC and create 1AM accounts for each department, then implement a new subnet for a FortiGate auto-scaling group and use routing tables to force the traffic through the FortiGate cluster.
  D. Create a VPC with a FortiGate auto-scaling group with a Transit Gateway attached to the three VPC to force routing through the FortiGate cluster
  A. Create a transit VPC with a FortiGate HA cluster, connect to the other two using VPC peering, and use routing tables to force traffic through the FortiGate cluster.
  D. Create a VPC with a FortiGate auto-scaling group with a Transit Gateway attached to the three VPC to force routing through the FortiGate cluster

• Question 62:

  Which two methods are supported for importing user defined Lookup Table Data into the FortiSIEM? (Choose two.)

  A. Report
  B. FTP
  C. API
  D. SCP
  A. Report
  C. API

• Question 63:

  Refer to the exhibit showing a firewall policy configuration.

  

  To prevent unauthorized access of their cloud assets, an administrator wants to enforce authentication on firewall policy ID 1. What change does the administrator need to make?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 64:

  Refer to the exhibit.

  

  You have been tasked with replacing the managed switch Forti Switch 2 shown in the topology. Which two actions are correct regarding the replacement process? (Choose two.)

  A. After replacing the FortiSwitch unit, the automatically created trunk name does not change
  B. CLAG-ICL needs to be manually reconfigured once the new switch is connected to the FortiGate
  C. After replacing the FortiSwitch unit, the automatically created trunk name changes.
  D. MCLAG-ICL will be automatically reconfigured once the new switch is connected to the FortiGate.
  A. After replacing the FortiSwitch unit, the automatically created trunk name does not change
  B. CLAG-ICL needs to be manually reconfigured once the new switch is connected to the FortiGate

• Question 65:

  Review the Application Control log.

  

  Which configuration caused the IPS engine to generate this log?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 66:

  Refer to the exhibits.

  

  A customer wants to deploy 12 FortiAP 431F devices on high density conference center, but they do not currently have any PoE switches to connect them to. They want to be able to run them at full power while having network redundancy

  From the FortiSwitch models and sample retail prices shown in the exhibit, which build of materials would have the lowest cost, while fulfilling the customer's requirements?

  A. 1x FortiSwitch 248EFPOE
  B. 2x FortiSwitch 224E-POE
  C. 2x FortiSwitch 248E-FPOE
  D. 2x FortiSwitch 124E-FPOE
  D. 2x FortiSwitch 124E-FPOE

• Question 67:

  Refer to the exhibit.

  

  A FortiWeb appliance is configured for load balancing web sessions to internal web servers. The Server Pool is configured as shown in the exhibit. How will the sessions be load balanced between server 1 and server 2 during normal operation?

  A. Server 1 will receive 25% of the sessions, Server 2 will receive 75% of the sessions
  B. Server 1 will receive 20% of the sessions, Server 2 will receive 66.6% of the sessions
  C. Server 1 will receive 33.3% of the sessions, Server 2 will receive 66 6% of the sessions
  D. Server 1 will receive 0% of the sessions Server 2 will receive 100% of the sessions
  D. Server 1 will receive 0% of the sessions Server 2 will receive 100% of the sessions

• Question 68:

  A FortiGate is configured to perform outbound firewall authentication with Azure AD as a SAML IdP. What are two valid interactions that occur when the client attempts to access the internet? (Choose two.)

  A. FortiGate SP sends a SAML request to the IdP.
  B. The Microsoft SAML IdP sends the SAML response to the FortiGate SP.
  C. The client browser forwards the SAML response received from Microsoft SAML IdP to the FortiGate SP.
  D. FortiGate SP redirects the client browser to the local captive portal and then redirects to the Microsoft SAML IdP.
  A. FortiGate SP sends a SAML request to the IdP.
  B. The Microsoft SAML IdP sends the SAML response to the FortiGate SP.

• Question 69:

  Refer to the exhibit.

  

  The exhibit shows the forensics analysis of an event detected by the FortiEDR core In this scenario, which statement is correct regarding the threat?

  A. This is an exfiltration attack and has been stopped by FortiEDR.
  B. This is an exfiltration attack and has not been stopped by FortiEDR
  C. This is a ransomware attack and has not been stopped by FortiEDR.
  D. This is a ransomware attack and has been stopped by FortiEDR
  C. This is a ransomware attack and has not been stopped by FortiEDR.

• Question 70:

  You are designing a setup where the FortiGate device is connected to two upstream ISPs using BGP. Part of the requirement is that you must be able to refresh the route advertisements manually without disconnecting the BGP neighborships.

  Which feature must you enable on the BGP neighbors to accomplish this goal?

  A. Synchronization
  B. Deterministic-med
  C. Graceful-restart
  D. Soft-reconfiguration
  D. Soft-reconfiguration