NSE8_812 by Fortinet Valid Free Exam Practice Test

Question 1

Refer to the exhibit.

You have been tasked with replacing the managed switch Forti Switch 2 shown in the topology.
Which two actions are correct regarding the replacement process? (Choose two.)

A. After replacing the FortiSwitch unit, the automatically created trunk name does not change B. CLAG-ICL needs to be manually reconfigured once the new switch is connected to the FortiGate C. After replacing the FortiSwitch unit, the automatically created trunk name changes. D. MCLAG-ICL will be automatically reconfigured once the new switch is connected to the FortiGate.

Correct Answer: A,B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit, which shows a VPN topology.

The device IP 10.1.100.40 downloads a file from the FTP server IP 192.168.4.50 Referring to the exhibit, what will be the traffic flow behavior if ADVPN is configured in this environment?

A. ADVPN is not supported when spokes are behind NAT B. All the session traffic will pass through the Hub C. The TCP port 21 must be allowed on the NAT Device2 D. Spoke1 will establish an ADVPN shortcut to Spoke2

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

An administrator discovers that CPU utilization of a FortiGate-200F is high and determines that no traffic is being accelerated by hardware.
Why is no traffic being accelerated by hardware?

A. delay-tcp-npu-session is enabled under the firewall policy. B. Oper-session-accounting is enabled under np6xlite config. C. strict-dirty-session-check is enabled in global config. D. check-protocol-header is set to strict in the global config.

Correct Answer: D

Question 4

Refer to the exhibit.

Given the exhibit, which two statements about FortiGate FGSP HA cluster behavior are correct? (Choose two.)

A. Cluster members will upgrade one at a time and failover during firmware upgrades. B. You can run FortiGate Virtual Router Redundancy Protocol (VRRP) high availability in addition to FGSP simultaneously. C. You can selectively synchronize only specific sessions between FGSP cluster members. D. Session synchronization occurs over Layer 3 by default, and if unavailable it will then try Layer 2.

Correct Answer: B,D

Question 5

Refer to the exhibit, which shows the high availability configuration for the FortiAuthenticator (FAC1).

Based on this information, which statement is true about the next FortiAuthenticator (FAC2) member that will join an HA cluster with this FortiAuthenticator (FAC1)?

A. The FortiToken license will need to be installed on the FAC2. B. FSSO sessions from FAC1 will be synchronized to FAC2. C. FAC2 can have its HA interface on a different network than FAC1. D. FAC2 can only process requests when FAC1 fails.

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

Refer to The exhibit, which shows a topology diagram.

A customer wants to use SD-WAN for traffic generated from the data center towards Branches. SD-WAN on HUB should follow the underlay condition on each Branch and the solution should be scalable for hundreds of Branches.
Which SD WAN-Rules strategy should be used?

A. Best Quality based on route-tags B. Lowest Cost SLA C. Auto based on link quality D. Manual based on route-tags

Correct Answer: A

Question 7

Refer to the exhibits.

You are configuring a Let's Encrypt certificate to enable SSL protection to your website. When FortiWeb tries to retrieve the certificate, you receive a certificate status failed, as shown below.

Based on the Server Policy settings shown in the exhibit, which two configuration changes will resolve this issue? (Choose two.)

A. Configure a TXT record of the domain and point to the IP address of the Virtual Server. B. Disable Redirect HTTP to HTTPS in the Server Policy. C. Enable HTTP service in the Server Policy. D. Remove the Web Protection Profile from this Server Policy.

Correct Answer: B,D

Question 8

Refer to the exhibit.

You have deployed a security fabric with three FortiGate devices as shown in the exhibit. FGT_2 has the following configuration:

FGT_1 and FGT_3 are configured with the default setting. Which statement is true for the synchronization of fabric-objects?

A. Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate. B. Objects from the root FortiGate will not be synchronized to any downstream FortiGate. C. Objects from the root FortiGate will only be synchronized to FGT__2. D. Objects from the root FortiGate will only be synchronized to FGT_3.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

An automation stitch was configured using an incoming webhook as the trigger named
'my_incoming_webhook'. The action is configured to execute the CLI Script shown:

The base Curl command starts with: curl -k -x POST -H 'Authorization: Bearer ' --data <data> <url> Which Curl command will successfully work with the configured automation stitch?

A. data: '{ "hostname": "bad_host_1", "ip": ["1.1.1.1"]}'
url:
http://192.168.226.129/api/v2/monitor/system/automation-stitch/webhook/my_incoming_webhook B. data: '{ "hostname": "bad_host_1", "ip": "1.1.1.1"}'
url: http://192.168.226.129/api/v2/cmdb/system/automation-stitch/webhook/my_incoming_webhook C. data: '{ "hostname": "bad_host_1", "ip": "1.1.1.1"}'
url:
http://192.168.226.129/api/v2/monitor/system/automation-stitch/webhook/my_incoming_webhook D. data: '{ "hostname": "bad_host_1", "ip": ["1.1.1.1"]}'
url:
http://192.168.226.129/api/v2/cmdb/system/automation-stitch/webhook/my_incoming_webhook

Correct Answer: A

Question 10

Refer to the exhibit, which shows diagnostic output.

A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup.
What is the problem in this scenario?

A. Route for the destination IP is missing in the routing table. B. SD-WAN Rule is matching only DNS traffic. C. Port1 is used because it has more available bandwidth. D. Traffic is matched by policy route.

Correct Answer: D

Fortinet NSE 8 - Written Exam (NSE8_812) - NSE8_812 Exam Practice Test