최신 NSE8_812 무료덤프 - Fortinet NSE 8

문제1

Which two methods are supported for importing user defined Lookup Table Data into the FortiSIEM? (Choose two.)

A. API

B. FTP

C. SCP

D. Report

정답: A,D

설명: (DumpTOP 회원만 볼 수 있음)

문제2

Refer to the exhibit, which shows the high availability configuration for the FortiAuthenticator (FAC1).

Based on this information, which statement is true about the next FortiAuthenticator (FAC2) member that will join an HA cluster with this FortiAuthenticator (FAC1)?

A. FSSO sessions from FAC1 will be synchronized to FAC2.

B. FAC2 can have its HA interface on a different network than FAC1.

C. FAC2 can only process requests when FAC1 fails.

D. The FortiToken license will need to be installed on the FAC2.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

문제3

Refer to the exhibit, which shows a VPN topology.

The device IP 10.1.100.40 downloads a file from the FTP server IP 192.168.4.50 Referring to the exhibit, what will be the traffic flow behavior if ADVPN is configured in this environment?

A. ADVPN is not supported when spokes are behind NAT

B. The TCP port 21 must be allowed on the NAT Device2

C. All the session traffic will pass through the Hub

D. Spoke1 will establish an ADVPN shortcut to Spoke2

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제4

Which feature must you enable on the BGP neighbors to accomplish this goal?

A. Deterministic-med

B. Synchronization

C. Soft-reconfiguration

D. Graceful-restart

정답: D

설명: (DumpTOP 회원만 볼 수 있음)

문제5

A remote worker requests access to an SSH server inside the network. You deployed a ZTNA Rule to their FortiClient. You need to follow the security requirements to inspect this traffic.
Which two statements are true regarding the requirements? (Choose two.)

A. You need to configure a FortiClient SSL-VPN tunnel to inspect the SSH traffic.

B. FortiGate can perform SSH access proxy host-key validation.

C. Traffic is discarded as ZTNA does not support SSH connection rules

D. SSH traffic is tunneled between the client and the access proxy over HTTPS

정답: B,D

설명: (DumpTOP 회원만 볼 수 있음)

문제6

SD-WAN is configured on a FortiGate. You notice that when one of the internet links has high latency the time to resolve names using DNS from FortiGate is very high.
You must ensure that the FortiGate DNS resolution times are as low as possible with the least amount of work.
What should you configure?

A. Configure local out traffic to use the outgoing interface based on SD-WAN rules with the interface IP and configure an SD-WAN rule to the DNS server.

B. Configure local out traffic to use the outgoing interface based on SD-WAN rules with a manual defined IP associated to a loopback interface and configure an SD-WAN rule from the loopback to the DNS server.

C. Configure an SD-WAN rule to the DNS server and use the FortiGate interface IPs in the source address.

D. Configure two DNS servers and use DNS servers recommended by the two internet providers.

정답: A

설명: (DumpTOP 회원만 볼 수 있음)

최신 NSE8_812 무료덤프 - Fortinet NSE 8 - Written Exam (NSE8_812)

우리와 연락하기

유용한 링크

최신 업데이트