Free Fortinet NSE8_812 Exam Questions

Become Fortinet Certified with updated NSE8_812 exam questions and correct answers

Page: 1 / 14

Total 70 Questions | Updated On: Jan 07, 2025

Add To Cart

Question 1

Refer to the exhibit.

A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be integrated

with FortiOS and there is an Active Directory server.

Given the configuration shown in the exhibit, which two statements about the installation are correct? (Choose

two.)

A : no client update time is specified on EMS, the user will be able to choose the time of installation if they wish to delay.

B : client can be eligible for multiple enabled configurations on the EMS server, and one will be chosen based on first priority

C : u can only deploy initial installations to Windows clients.

D : u must use Standard or Enterprise SQL Server rather than the included SQL Server Express

E : Windows clients only require "File and Printer Sharing0 allowed and the rest is handled by Active Directory group policy

Answer: B,C

Question 2

Refer to the exhibit showing an SD-WAN configuration.

According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?

A : port16 and port1

B : rt1 and port1

C : rt16 and port15

D : rt1 and port15

Answer: A

Question 3

Refer to the exhibit.

You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.

How should you create the SD-WAN zones?

A : With no members configured

B : With members and assign overlay interfaces

C : With members and assign interfaces but do not specify a gateway

D : With members without interface assignments

Answer: B

Question 4

Refer to the exhibit.

To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked with

configuring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.

Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interface

options referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)

A : t net-device disable

B : t mode-cfg enable

C : t ike-version 1

D : t add-route enable

E : t mode-cfg-allow-client-selector enable

Answer: A,D

Question 5

Refer to the exhibit.

You are operating an internal network with multiple OSPF routers on the same LAN segment. FGT_3 needs to

be added to the OSPF network and has the configuration shown in the exhibit. FGT_3 is not establishing any

OSPF connection.

What needs to be changed to the configuration to make sure FGT_3 will establish OSPF neighbors without

affecting the DR/BDR election?

A :

B :

C :

D :

Answer: B

Page: 1 / 14

Total 70 Questions | Updated On: Jan 07, 2025

Add To Cart