Fortinet NSE 8 - Recertification Sample Questions:

1. The output shown on the exhibit from FortiManager is displayed during an import if the device configuration .
Which statement describes the correct action taken for these duplicate objects?

A) FortiManager does not import these duplicate entries into the ADOM database because they already exist in the ADOM database.
B) Forti Manager installs these duplicate objects to the managed device from the ADOM database.
C) The import fails because of the duplicate entries detected which exist in the ADOM database.
D) FortiManager creates indexed duplicate entries for these objects in the ADOM database.

2.
Anti-Virus Real-Time Protection is enabled without any exclusions.
Referring to the exhibit, which two behaviors will the FortiClient endpoint have after receiving the profile update from the FortiClient EMS? (Choose two.)

A) Files executed from a mapped network drive will not be inspected by the FortiClient endpoint AntiVirus engine.
B) If the Real-Time Protection does not detect a virus, the user will be able to access a downloaded file when the FortiSandbox is unreachable.
C) The user will not be able to access a downloaded file for a maximum of 60 seconds if it is not a virus and the FortiSandbox is reachable.
D) Access to a downloaded file will always be allowed after 60 seconds when the FortiSandbox is reachable.

3. A customer is looking for a way to remove javascripts, macros and hyperlinks from documents traversing the network without affecting the integrity of the content. You propose to use the Content disarm and reconstruction (CDR) feature of the FortiGate.
Which two considerations are valid to implement CDR in this scenario? (Choose two.)

A) Files processed by CDR can have the original copy quarantined on the FortiGate.
B) CDR is supported on HTTPS, SMTPS, and IMAPS if deep inspection is enabled.
C) The inspection mode of the FortiGate is not relevant for CDR to operate.
D) CDR can only be performed on Microsoft Office Document and PDF files.

4. Refer to the exhibit, which shows a VPN topology.

The device IP 10.1.100.40 downloads a file from the FTP server IP 192.168.4.50.
Referring to the exhibit, what will be the traffic flow behavior if ADVPN is configured in this environment?

A) ADVPN is not supported when spokes are behind NAT
B) The TCP port 21 must be allowed on the NAT Device2
C) All the session traffic will pass through the Hub
D) Spoke1 will establish an ADVPN shortcut to Spoke2

5. You are asked to establish a VPN tunnel with a service provider using a third-party VPN device.
The service provider has assigned subnet 30.30.30.0/24 for your outgoing traffic going towards the services hosted by the provider on network 20.20.20.0/24.
You have multiple computers which will be accessing the remote services hosted by the service provider.
Which three configuration components meet these requirements? (Choose three.)

A) Configure IPsec phase 2 proxy IDs for a source of 10.10.10.0/24 and destination of
20.20.20.0/24.
B) Configure an IP Pool of type Overload for range 30.30.30.10-30.30.30.10.
Enable NAT on a policy from your LAN forwards the VPN tunnel and select that pool.
C) Configure a static route towards the VPN tunnel for 20.20.20.0/24.
D) Configure IPsec phase 2 proxy IDs for a source of 30.30.30.0/24 and destination of
20.20.20.0/24.
E) Configure an IP Pool of Type One-to-One for range 30.30.30.10-30.30.30.10.
Enable NAT on a policy from your LAN towards the VPN tunnel and select that pool.

Solutions: