Fortinet NSE 8 - Written Exam (NSE8_812) (NSE8_812) Free Practice Test

Question 1

A FortiGate must be configured to accept VoIP traffic which will include session initiation protocol (SIP) traffic. Which statement about the VoIP configuration options is correct?

A. Rate tracking of SIP requests is only possible when the application layer gateway (ALG) is set to Flow mode.

B. Restricting SIP requests is only possible when using the SIP Session Helper.

C. FortiOS cannot accept SIP traffic if both the SIP Session Helper and the application layer gateway (ALG) are disabled.

D. By default, VoIP traffic will be processed using the SIP Session Helper.

Correct Answer: C

Question 2

Refer to the exhibit.

A customer wants to automate the creation and configuration of FortiGate VM instances in a VMware vCenter environment using Terraform. They have the creation part working with the code shown in the exhibit.
Which code snippet will allow Terraform to automatically connect to a newly deployed FortiGate if its IP was dynamically assigned by VMware NSX-T?

A.

B.

C.

D.

Correct Answer: B

Question 3

A FortiGate running FortiOS 7.2.0 GA is configured in multi-vdom mode with a vdom set to vdom type Admin and another vdom set to vdom type Traffic.
Which two GUI sections are available on both VDOM types? (Choose two.)

A. Interface configuration

B. FortiClient configuration

C. Certificates

D. Security Fabric topology and external connectors

E. Packet capture

Correct Answer: A,E

Question 4

Review the Application Control log.

Which configuration caused the IPS engine to generate this log?

A.

B.

C.

D.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit.

You have been tasked with replacing the managed switch Forti Switch 2 shown in the topology.
Which two actions are correct regarding the replacement process? (Choose two.)

A. After replacing the FortiSwitch unit, the automatically created trunk name changes.

B. MCLAG-ICL will be automatically reconfigured once the new switch is connected to the FortiGate.

C. After replacing the FortiSwitch unit, the automatically created trunk name does not change

D. CLAG-ICL needs to be manually reconfigured once the new switch is connected to the FortiGate

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Refer to the exhibits.

The exhibits show a FortiGate network topology and the output of the status of high availability on the FortiGate.
Given this information, which statement is correct?

A. The cluster members are on the same network and the IP addresses were statically assigned.

B. The ethertype values of the HA packets are 0x8890, 0x8891, and 0x8892

C. FGVMEVLQOG33WM3D and FGVMEVGCJNHFYI4A share a virtual MAC address.

D. The cluster mode can support a maximum of four (4) FortiGate VMs

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

A FortiGate deployment contains the following configuration:

What is the result of this configuration?

A. Route-maps are not configurable in VDOM SERVICES

B. Route-maps from the Root VDOM configuration are available in VDOM SERVICES

C. Route-maps from VDOM SERVICES are available in all other VDOMs

D. Route-maps for VDOM SERVICES are excluded from HA configuration synchronization

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

An automation stitch was configured using an incoming webhook as the trigger named
'my_incoming_webhook'. The action is configured to execute the CLI Script shown:

The base Curl command starts with: curl -k -x POST -H 'Authorization: Bearer ' --data <data> <url> Which Curl command will successfully work with the configured automation stitch?

A. data: '{ "hostname": "bad_host_1", "ip": ["1.1.1.1"]}'
url:
http://192.168.226.129/api/v2/cmdb/system/automation-stitch/webhook/my_incoming_webhook

B. data: '{ "hostname": "bad_host_1", "ip": "1.1.1.1"}'
url: http://192.168.226.129/api/v2/cmdb/system/automation-stitch/webhook/my_incoming_webhook

C. data: '{ "hostname": "bad_host_1", "ip": "1.1.1.1"}'
url:
http://192.168.226.129/api/v2/monitor/system/automation-stitch/webhook/my_incoming_webhook

D. data: '{ "hostname": "bad_host_1", "ip": ["1.1.1.1"]}'
url:
http://192.168.226.129/api/v2/monitor/system/automation-stitch/webhook/my_incoming_webhook

Correct Answer: D

Question 9

Refer to the exhibits.

A customer is trying to restore a VPN connection configured on a FortiGate. Exhibits show output during a troubleshooting session when the VPN was working and the current baseline VPN configuration.