Free Fortinet NSE8_812 Exam Questions
Try our Free Demo Practice Tests for Comprehensive NSE8_812 Exam Preparation
Page No. 1 of 22
-
Question 1
-
Refer to the exhibit.
To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked withconfiguring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interfaceoptions referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)
Answer: A,D
-
Refer to the exhibit.
-
Question 2
-
Refer to the exhibits, which show a network topology and VPN configuration.
A network administrator has been tasked with modifying the existing dial-up IPsec VPN infrastructure to
detect the path quality to the remote endpoints.
After applying the configuration shown in the configuration exhibit, the VPN clients can still connect and
access the protected 172.16.205.0/24 network, but no SLA information shows up for the client tunnels when
issuing the diagnose sys link-monitor tunnel all command on the FortiGate CLI.
What is wrong with the configuration?
Answer: A
-
Refer to the exhibits, which show a network topology and VPN configuration.
-
Question 3
-
Refer to the exhibits.
A FortiGate cluster (CL-1) protects a data center hosting multiple web applications. A pair of FortiADCdevices are already configured for SSL decryption (FAD-1), and re-encryption (FAD-2). CL-1 must acceptunencrypted traffic from FAD-1, perform application detection on the plain-text traffic, and forward theinspected traffic to FAD-2.The SSL-Offload-App-Detect application list and SSL-Offload protocol options profile are applied to thefirewall policy handling the web application traffic on CL-1.Given this scenario, which two configuration tasks must the administrator perform on CL-1? (Choose two.)
Answer: B,C
-
Refer to the exhibits.
-
Question 4
-
Refer to the exhibit, which shows diagnostic output.
A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the
SD-WAN setup.
What is the problem in this scenario?
Answer: C
-
Refer to the exhibit, which shows diagnostic output.
- Question 5
PAGE: 1 - 22