NSE8_812 Exam Questions

Which of the following configurations for an OSPF interface is correct?

Which command detects where a routing path is broken?

The exhibit shows an LDAP server configuration on a FortiGate device. The LDAP user, John Smith, has the following LDAP attributes: cn= John Smith OU=CN=John Smith,CN=Users,DC=TAC,...

Your NOC contracts the security team due to a problem with a new application flow. You are instructed to disable hardware acceleration for the policy shown in the exhibit for troub...

Your company uses a cluster of two FortiGate 3600C units in active-passive mode to protect the corporate network. The FortiGate cluster sends its logs to FortiAnalyzer that you hav...

Virtual Domains (VDOMs) allow a FortiGate administrator to do what?

A static route is configured for a FortiGate unit from the CLI using the following commands: config router static

Which of the following conditions is NOT required for this static default route to be displayed in the FortiGate unit's routing table?

A customer wants to install a FortiSandbox device to identify suspicious files received by an e-mail server. All the incoming e-mail traffic to the e-mail server uses the SMTPS pro...

Which statements are correct properties of a partial mesh VPN deployment? (Choose two.)

Which statements are correct regarding an IPv6 over IPv4 IPsec configuration? (Choose two.)

Refer to the exhibit. The exhibit shows a full-mesh deployment between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met: - 20 Gbps full...

You want to manage a FortiGate with the FortiCloud service. The FortiGate shows up in your list of devices on the FortiCloud Web site, but all management functions are either missi...

The exhibit shows the steps for creating a URL rewrite policy on a FortiWeb. Which statement represents the purpose of this policy?

You are asked to add a FortiDDoS to the network to combat detected slow connection attacks such as Slowloris. Which prevention mode on FortiDDoS will protect you against this speci...

You are building a FortiGate cluster which is stretched over two locations. The HA connections for the cluster are terminated on the local switches in the data centers. Once the Fo...

You want to access the JSON API on FortiManager to retrieve information on an object. In this scenario, which two methods will satisfy the requirement? (Choose two.)

You created a custom health-check for your FortiWeb deployment? Given the output shown in the exhibit, which statement is true?

You created an aggregate interface between a FortiGate and a switch consisting of two 1 Gbps links as shown in the exhibit. However, the maximum bandwidth never exceeds 1 Gbps and...

A FortiGate device is configured to authenticate SSL VPN users using digital certificates. A partial FortiGate configuration is shown in the exhibit. Referring to the exhibit, whic...

Which command-line option for deep-inspection SSL would have the FortiGate re-sign all untrusted self- signed certificates with the trusted FortiNet_CA_SSL certificate?

A FortiGate is configured for a dial-up IPsec VPN to allow multiple FortiGate devices to connect to it. However, FortiGate A and B have problems connecting to the VPN. Only one of...

A customer wants to enable SYN flood mitigation in a FortiDDoS device. The FortiDDoS must reply with one SYN/ACK packet per SYN packet from a new source IP address. Which SYN flood...

You configured AV and Web filtering for your outgoing Internet connections. You later notice that not all Web sessions are being inspected and you start troubleshooting the problem...

access the HTTPS GUI of the blade located in logical slot 3 of the secondary chassis in a high-availability cluster. Which URL will accomplish this task?

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

A customer wants to integrate their on-premise FortiGate with their Azure fabric infrastructure. Which two components must be in place to configure the Azure Fabric connector? (Cho...

You cannot ping the FortiGate default gateway 10.10.10.1 from the FortiGate CLI. The FortiGate interface wan1 and the default gateway is wan1 and its IP address is 10.10.10.254/24....

An organization has one central site and three remote sites. A FortiSIEM has been installed on the central site and now all devices across the remote sites must be centrally monito...

A customer is looking for a way to remove javascripts, macros and hyperlinks from documents traversing the network without affecting the integrity of the content. You propose to us...

Refer to the exhibit. As shown in the exhibit, a FortiADC is load-balancing IPv4 traffic between two next-hop routers. The FortiADC does not know the IP addresses of the servers. A...

You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options. Referring to the exhibit, which statement is correct in thi...

You have deployed a FortiGate in NAT/Route mode as a Secure Web Gateway with a few IP-based authentication firewall policies. Your customer reports that some users now have differe...

Refer to the exhibit. In this scenario, which statement is correct?

A customer is experiencing problems with a legacy L3/L4 firewall device and the IPv6 SIP VoIP traffic. Their device is dropping SIP packets; consequently, it cannot process SIP voi...

Refer to the exhibit. A VPN IPsec is connecting the headquarters office (HQ) with a branch office (BO). OSPF is used to redistribute routes between the offices. After deployment, a...

A customer has a SCADA environmental control device that is triggering a false-positive IPS alert whenever the Web GUI of the device is accessed. You cannot create a functional cus...

Refer to the exhibit. The FortiAP profile used by the FortiGate managed AP is shown in the exhibit. Which two statements in this scenario are correct? (Choose two.)

Refer to the exhibit. The exhibit shows a topology where a FortiGate is split into two VDOMs, `root` and `vd-lan`. The `root` VDOM provides external SSL-VPN access, where the users...

A customer wants to use a central RADIUS server for management authentication when connecting to the FortiGate GUI and to provide different levels of access for different types of...

Refer to the exhibit. You need to apply the security features listed below to the network shown in the exhibit. - High-grade DDoS protection - Web security and load balancing for S...

In a FortiGate 5000 series, two FortiControllers are working as an SLBC cluster in a-p mode. The configuration shown below is applied: config load-balance session-setup set tcp-ing...

An administrator reports continuous high CPU utilization on a FortiGate device due to the IPS engine. Consider the global IPS configuration shown below. config ips settings set pac...

Refer to the exhibit. You have configured an IPsec tunnel to a branch office. Now you want to make sure that the encryption of the tunnel is offloaded to hardware. Referring to the...

Refer to the exhibit. You have installed a FortiSandbox and configured it in your FortiMail. Referring to the exhibit, which two statements are correct? (Choose two.)

A FortiGate with the default configuration shown below is deployed between two IP telephones. FortiGate receives the INVITE request shown in the exhibit from Phone A (internal) to...

Referring to the exhibit, which statement is true?

A customer is using dynamic routing to exchange the default route between two FortiGate devices using OSPFv2. The output of the get router info ospf neighbor command shows that the...

Referring to the firewall polices shown in exhibit, which two statements are true? (Choose two.)

Referring to the exhibit, what will happen if FortiSandbox categorizes an e-mail attachment submitted by FortiMail as a high risk?