Free Fortinet NSE8_812 Exam Questions
Absolute Free NSE8_812 Exam Practice for Comprehensive Preparation
-
Question 1
-
Refer to the exhibits.
A FortiGate cluster (CL-1) protects a data center hosting multiple web applications. A pair of FortiADCdevices are already configured for SSL decryption (FAD-1), and re-encryption (FAD-2). CL-1 must acceptunencrypted traffic from FAD-1, perform application detection on the plain-text traffic, and forward theinspected traffic to FAD-2.The SSL-Offload-App-Detect application list and SSL-Offload protocol options profile are applied to thefirewall policy handling the web application traffic on CL-1.Given this scenario, which two configuration tasks must the administrator perform on CL-1? (Choose two.)
Answer: B,C
-
Refer to the exhibits.
-
Question 2
-
Refer to the exhibit.
You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.
How should you create the SD-WAN zones?
Answer: B
-
Refer to the exhibit.
-
Question 3
-
A FortiGate deployment contains the following configuration:
What is the result of this configuration?
Answer: B
-
A FortiGate deployment contains the following configuration:
-
Question 4
-
Refer to the exhibits, which show a network topology and VPN configuration.
A network administrator has been tasked with modifying the existing dial-up IPsec VPN infrastructure to detect the path quality to the remote endpoints. After applying the configuration shown in the configuration exhibit, the VPN clients can still connect and access the protected 172.16.205.0/24 network, but no SLA information shows up for the client tunnels when issuing the diagnose sys link-monitor tunnel all command on the FortiGate CLI. What is wrong with the configuration?
Answer: A
-
-
Question 5
-
Refer to the exhibit, which shows diagnostic output.
A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?
Answer: C
-