ExamGecko
Login
Home / Fortinet / NSE8_812 / List of questions
Ask Question

Fortinet NSE8_812 Practice Test - Questions Answers, Page 7

List of questions

Question 61

Report Export Collapse

Refer to the exhibit.

Fortinet NSE8_812 image Question 1 63877670158643815429274

Given the exhibit, which two statements about FortiGate FGSP HA cluster behavior are correct? (Choose two.)

You can run FortiGate Virtual Router Redundancy Protocol (VRRP) high availability in addition to FGSP simultaneously.

You can run FortiGate Virtual Router Redundancy Protocol (VRRP) high availability in addition to FGSP simultaneously.

Session synchronization occurs over Layer 3 by default, and if unavailable it will then try Layer 2.

Session synchronization occurs over Layer 3 by default, and if unavailable it will then try Layer 2.

You can selectively synchronize only specific sessions between FGSP cluster members.

You can selectively synchronize only specific sessions between FGSP cluster members.

Cluster members will upgrade one at a time and failover during firmware upgrades.

Cluster members will upgrade one at a time and failover during firmware upgrades.

Suggested answer: A, B
asked 15/03/2025
wendy brouwer
47 questions

Question 62

Report Export Collapse

Refer to the exhibit showing a FortiView monitor screen.

Fortinet NSE8_812 image Question 2 63877670158659440893393

After a Secure SD-WAN implementation a customer reports that in FortiAnalyzer under FortiView Secure SD-WAN Monitor there is No Device for selection.

What can cause this issue?

Upload option from FortiGate to FortiAnalyzer is not set as a real time.

Upload option from FortiGate to FortiAnalyzer is not set as a real time.

Extended logging is not enabled on FortiGate.

Extended logging is not enabled on FortiGate.

ADOM 1 is set as a Fabric ADOM.

ADOM 1 is set as a Fabric ADOM.

sla-fail-log-period and sla-pass-log-period on FortiGate health check is not set.

sla-fail-log-period and sla-pass-log-period on FortiGate health check is not set.

Suggested answer: A
asked 15/03/2025
Kareem Dadoul
52 questions

Question 63

Report Export Collapse

Review the Application Control log.

Fortinet NSE8_812 image Question 3 63877670158690689573875

Which configuration caused the IPS engine to generate this log?

Become a Premium Member for full access
  Unlock Premium Member

Question 64

Report Export Collapse

Refer to the exhibit.

Fortinet NSE8_812 image Question 4 63877670158721934354357

You are managing a FortiSwitch 3032E that is managed by FortiLink on a FortiGate 3960E. The 3032E is heavily utilized and there is only one port free.

The requirement is to add an additional three FortiSwitch 448E devices with 10Gbps SFP+ connectivity directly to the 3032E. The plan is to use split port (phy-mode) with QSFP28 mode to connect the new 448E switches.

In this scenario, which statement about the switch deployment is correct?

Become a Premium Member for full access
  Unlock Premium Member

Question 65

Report Export Collapse

A customer has FortiAP devices in three branch offices managed from a FortiGate in the HQ. Each FortiAP is connected to a dedicated management VLAN.

The customer wants the users connected to the FortiAP SSIDs to use the branch local internet connection, but each branch uses a different VLAN ID for the bridge. HQ users travel to different branches and connect to the same SSID.

Which configuration option will solve this requirement?

Become a Premium Member for full access
  Unlock Premium Member

Question 66

Report Export Collapse

Refer to The exhibit showing a FortiEDR configuration.

Fortinet NSE8_812 image Question 6 63877670158737558218476

Based on the exhibit, which statement is correct?

Become a Premium Member for full access
  Unlock Premium Member

Question 67

Report Export Collapse

You are performing a packet capture on a FortiGate 2600F with the hyperscale licensing installed. You need to display on screen all egress/ingress packets from the port16 interface that have been offloaded to the NP7.

Which three commands need to be run? (Choose three.)

Become a Premium Member for full access
  Unlock Premium Member

Question 68

Report Export Collapse

Refer to the exhibits.

Fortinet NSE8_812 image Question 8 6387767015883130567679

The exhibits show the configuration and debug output from a FortiGate Public SDN Connector.

What is a possible reason for this dynamic address object to be empty?

Become a Premium Member for full access
  Unlock Premium Member

Question 69

Report Export Collapse

Refer to the exhibit.

Fortinet NSE8_812 image Question 9 63877670158862553388159

A customer needs to create a multi-tier MCLAG set up with the topology as shown in the exhibit.

A1/A2

B1/B2

C1/C2

Which command snippet should be applied to it, to allow active/active links in this topology?

Become a Premium Member for full access
  Unlock Premium Member

Question 70

Report Export Collapse

Refer to the exhibit.

Fortinet NSE8_812 image Question 10 63877670158987550257843

A customer wants to automate the creation and configuration of FortiGate VM instances in a VMware vCenter environment using Terraform. They have the creation part working with the code shown in the exhibit.

Which code snippet will allow Terraform to automatically connect to a newly deployed FortiGate if its IP was dynamically assigned by VMware NSX-T?

Become a Premium Member for full access
  Unlock Premium Member
Total 105 questions
Go to page: of 11
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

Refer to the exhibits. A customer is trying to restore a VPN connection configured on a FortiGate. Exhibits show output during a troubleshooting session when the VPN was working and the current baseline VPN configuration. Which configuration parameters will restore VPN connectivity based on the diagnostic output?
Refer to the exhibit. The Company Corp administrator has enabled Workflow mode in FortiManager and has assigned approval roles to the current administrators. However, workflow approval does not function as expected. The CTO is currently unable to approve submitted changes. Given the exhibit, which two possible solutions will resolve the workflow approval problems with the Workflow_72 ADOM? (Choose two.)
Refer to the exhibit of a FortiNAC configuration. In this scenario, which two statements are correct? (Choose two.)
Refer to the exhibit. You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change. How should you create the SD-WAN zones?
A Hub FortiGate is connecting multiple branch FortiGate devices separating the traffic centrally in unique VRFs. Routing information is exchanged using BGP between the Hub and the Branch FortiGate devices. You want to efficiently enable route leaking of specific routes between the VRFs. Which two steps are required to achieve this requirement? (Choose two.)
A FortiGate deployment contains the following configuration: What is the result of this configuration?
You have configured a Site-to-Site IPsec VPN tunnel between a FortiGate and a third-party device but notice that one of the error counters on the tunnel interface keeps increasing. Which two configuration options can resolve this problem? (Choose two.)
Refer to the exhibits. You must integrate a FortiMail and FortiSandbox Enhanced Cloud solution for a customer who is concerned about the e-mails being delayed for too long. According to the configuration shown in the exhibits, which would be an expected behavior?
A FortiGate must be configured to accept VoIP traffic which will include session initiation protocol (SIP) traffic. Which statement about the VoIP configuration options is correct?
Refer to the exhibit. A customer reports that they are not able to reach subnet 10.10.10.0/24 from their FortiGate device. Based on the exhibit, what should you do to correct the situation?