Fortinet NSE8_812 Quiz 1 Topic 1 Questions 1-5

Question: 1

A remote IT Team is in the process of deploying a FortiGate in their lab. The closed environment has been configured to support zero-touch provisioning from the FortiManager, on the same network, via DHCP options. After waiting 15 minutes, they are reporting that the FortiGate received an IP address, but the zero-touch process failed.

The exhibit below shows what the IT Team provided while troubleshooting this issue:

q1_NSE8_812

Which statement explains why the FortiGate did not install its configuration from the FortiManager?

AThe FortiGate was not configured with the correct pre-shared key to connect to the FortiManager

BThe DHCP server was not configured with the FQDN of the FortiManager

CThe DHCP server used the incorrect option type for the FortiManager IP address.

DThe configuration was modified on the FortiGate prior to connecting to the FortiManager

Show Answer

Question: 2

Which feature must you enable on the BGP neighbors to accomplish this goal?

AGraceful-restart

BDeterministic-med

CSynchronization

DSoft-reconfiguration

Show Answer

Question: 3

Refer to the exhibit.

q3_NSE8_812

You are deploying a FortiGate 6000F. The device should be directly connected to a switch. In the future, a new hardware module providing higher speed will be installed in the switch, and the connection to the FortiGate must be moved to this higher-speed port.

You must ensure that the initial FortiGate interface connected to the switch does not affect any other port when the new module is installed and the new port speed is defined.

How should the initial connection be made?

AConnect the switch on any interface between ports 21 to 24

BConnect the switch on any interface between ports 25 to 28

CConnect the switch on any interface between ports 1 to 4

DConnect the switch on any interface between ports 5 to 8.

Show Answer

Question: 4

You are deploying a FortiExtender (FEX) on a FortiGate-60F. The FEX will be managed by the FortiGate. You anticipate high utilization. The requirement is to minimize the overhead on the device for WAN traffic.

Which action achieves the requirement in this scenario?

AAdd a switch between the FortiGate and FEX.

BEnable CAPWAP connectivity between the FortiGate and the FortiExtender.

CChange connectivity between the FortiGate and the FortiExtender to use VLAN Mode

DAdd a VLAN under the FEX-WAN interface on the FortiGate.

Show Answer

Question: 5

Which two statements are correct on a FortiGate using the FortiGuard Outbreak Protection Service (VOS)? (Choose two.)

AThe FortiGuard VOS can be used only with proxy-base policy inspections.

BIf third-party AV database returns a match the scanned file is deemed to be malicious.

CThe antivirus database queries FortiGuard with the hash of a scanned file

DThe AV engine scan must be enabled to use the FortiGuard VOS feature

EThe hash signatures are obtained from the FortiGuard Global Threat Intelligence database.

Show Answer

Fortinet NSE8_812 Quiz:1 Topic:1 Questions:1-5