100% Free Fortinet NSE8_812 Practice Test Questions

Question 1

A FortiGate deployment contains the following configuration:

What is the result of this configuration?

A : Route-maps are not configurable in VDOM SERVICES

B : Route-maps for VDOM SERVICES are excluded from HA configuration synchronization

C : Route-maps from VDOM SERVICES are available in all other VDOMs

D : Route-maps from the Root VDOM configuration are available in VDOM SERVICES

Answer: B

Question 2

Refer to the exhibit, which shows diagnostic output.A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?

A : SD-WAN Rule is matching only DNS traffic.

B : Port1 is used because it has more available bandwidth.

C : Traffic is matched by policy route.

D : Route for the destination IP is missing in the routing table.

Answer: C

Question 3

Refer to the exhibits, which show a network topology and VPN configuration.A network administrator has been tasked with modifying the existing dial-up IPsec VPN infrastructure to detect the path quality to the remote endpoints. After applying the configuration shown in the configuration exhibit, the VPN clients can still connect and access the protected 172.16.205.0/24 network, but no SLA information shows up for the client tunnels when issuing the diagnose sys link-monitor tunnel all command on the FortiGate CLI. What is wrong with the configuration?

A : SLA link monitoring does not work with the net-device setting.

B : The admin needs to disable the mode-cfg setting.

C : IPsec Phase1 Interface has to be configured in IPsec main mode.

D : It is necessary to use the IKEv2 protocol in this situation.

Answer: A

Question 4

Refer to the exhibits, which show a network topology and VPN configuration.A network administrator has been tasked with modifying the existing dial-up IPsec VPN infrastructure to detect the path quality to the remote endpoints. After applying the configuration shown in the configuration exhibit, the VPN clients can still connect and access the protected 172.16.205.0/24 network, but no SLA information shows up for the client tunnels when issuing the diagnose sys link-monitor tunnel all command on the FortiGate CLI. What is wrong with the configuration?

A : SLA link monitoring does not work with the net-device setting.

B : The admin needs to disable the mode-cfg setting.

C : IPsec Phase1 Interface has to be configured in IPsec main mode.

D : It is necessary to use the IKEv2 protocol in this situation.

Answer: A

Question 5

Refer to the exhibit.