Free Fortinet NSE8_812 Exam Questions
Absolute Free NSE8_812 Exam Practice for Comprehensive Preparation
-
Question 1
-
Refer to the exhibit showing the history logs from a FortiMail device.
Which FortiMail email security feature can an administrator enable to treat these emails as spam?
Answer: C
-
Refer to the exhibit showing the history logs from a FortiMail device.
-
Question 2
-
Refer to the exhibits, which show a network topology and VPN configuration.
A network administrator has been tasked with modifying the existing dial-up IPsec VPN infrastructure to detect the path quality to the remote endpoints. After applying the configuration shown in the configuration exhibit, the VPN clients can still connect and access the protected 172.16.205.0/24 network, but no SLA information shows up for the client tunnels when issuing the diagnose sys link-monitor tunnel all command on the FortiGate CLI. What is wrong with the configuration?
Answer: A
-
-
Question 3
-
Refer to the exhibit.
You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.
How should you create the SD-WAN zones?
Answer: B
-
Refer to the exhibit.
-
Question 4
-
Refer to the exhibit.
To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked withconfiguring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interfaceoptions referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)
Answer: A,D
-
Refer to the exhibit.
-
Question 5
-
Refer to the exhibits.
A FortiGate cluster (CL-1) protects a data center hosting multiple web applications. A pair of FortiADCdevices are already configured for SSL decryption (FAD-1), and re-encryption (FAD-2). CL-1 must acceptunencrypted traffic from FAD-1, perform application detection on the plain-text traffic, and forward theinspected traffic to FAD-2.The SSL-Offload-App-Detect application list and SSL-Offload protocol options profile are applied to thefirewall policy handling the web application traffic on CL-1.Given this scenario, which two configuration tasks must the administrator perform on CL-1? (Choose two.)
Answer: B,C
-
Refer to the exhibits.