Free Fortinet Network Security Expert NSE 8 – Written Exam NSE8_812 Exam Practice Test

Which two methods are supported for importing user defined Lookup Table Data into the FortiSIEM? (Choose two.)

• Report
• FTP
• API
• SCP

You are deploying a FortiExtender (FEX) on a FortiGate-60F. The FEX will be managed by the FortiGate. You anticipate high utilization. The requirement is to minimize the overhead on the device for WAN traffic.Which action achieves the requirement in this scenario?

• Add a switch between the FortiGate and FEX.
• Enable CAPWAP connectivity between the FortiGate and the FortiExtender.
• Change connectivity between the FortiGate and the FortiExtender to use VLAN Mode
• Add a VLAN under the FEX-WAN interface on the FortiGate.

Wh.ch feature must you enable on the BGP neighbors to accomplish this goal?

• Graceful-restart
• Deterministic-med
• Synchronization
• Soft-reconfiguration

A retail customer with a FortiADC HA cluster load balancing five webservers in L7 Full NAT mode is receiving reports of users not able to access their website during a sale event. But for clients that were able to connect, the website works fine.CPU usage on the FortiADC and the web servers is low, application and database servers are still able to handle more traffic, and the bandwidth utilization is under 30%.Which two options can resolve this situation? (Choose two.)

• Change the persistence rule to LB_PERSIS_SSL_SESSJD.
• Add more web servers to the real server poof
• Disable SSL between the FortiADC and the web servers
• Add a connection-pool to the FortiADC virtual server

You are responsible for recommending an adapter type for NICs on a FortiGate VM that will run on an ESXi Hypervisor. Your recommendation must consider performance as the main concern, cost is not a factor. Which adapter type for the NICs will you recommend?

• Native ESXi Networking with E1000
• Virtual Function (VF) PCI Passthrough
• Native ESXi Networking with VMXNET3
• Physical Function (PF) PCI Passthrough

You are migrating the branches of a customer to FortiGate devices. They require independent routing tables on the LAN side of the network.After reviewing the design, you notice the firewall will have many BGP sessions as you have two data centers (DC) and two ISPs per DC while each branch is using at least 10 internal segments.Based on this scenario, what would you suggest as the more efficient solution, considering that in the future the number of internal segments, DCs or internet links per DC will increase?

• No change in design is needed as even small FortiGate devices have a large memory capacity.
• Acquire a FortiGate model with more capacity, considering the next 5 years growth.
• Implement network-id, neighbor-group and increase the advertisement-interval
• Redesign the SD-WAN deployment to only use a single VPN tunnel and segment traffic using VRFs on BGP

Refer to the exhibits.

• 1x FortiSwitch 248EFPOE
• 2x FortiSwitch 224E-POE
• 2x FortiSwitch 248E-FPOE
• 2x FortiSwitch 124E-FPOE

A customer's cybersecurity department needs to implement security for the traffic between two VPCs in AWS, but these belong to different departments within the company. The company uses a single region for all their VPCs.Which two actions will achieve this requirement while keeping separate management of each department's VPC? (Choose two.)

• Create a transit VPC with a FortiGate HA cluster, connect to the other two using VPC peering, and use routing tables to force traffic through the FortiGate cluster.
• Create an 1AM account for the cybersecurity department to manage both existing VPC, create a FortiGate HA Cluster on each VPC and IPSEC VPN to force traffic between the VPCs through the FortiGate clusters
• Migrate all the instances to the same VPC and create 1AM accounts for each department, then implement a new subnet for a FortiGate auto-scaling group and use routing tables to force the traffic through the FortiGate cluster.
• Create a VPC with a FortiGate auto-scaling group with a Transit Gateway attached to the three VPC to force routing through the FortiGate cluster

Which two statements are correct on a FortiGate using the FortiGuard Outbreak Protection Service (VOS)? (Choose two.)

• The FortiGuard VOS can be used only with proxy-base policy inspections.
• If third-party AV database returns a match the scanned file is deemed to be malicious.
• The antivirus database queries FortiGuard with the hash of a scanned file
• The AV engine scan must be enabled to use the FortiGuard VOS feature
• The hash signatures are obtained from the FortiGuard Global Threat Intelligence database.

You must configure an environment with dual-homed servers connected to a pair of FortiSwitch units using an MCLAG.Multicast traffic is expected in this environment, and you should ensure unnecessary traffic is pruned from links that do not have a multicast listener.In which two ways must you configure the igmps-f lood-traffic and igmps-flood-report settings? (Choose two.)

• disable on ICL trunks
• enable on ICL trunks
• disable on the ISL and FortiLink trunks
• enable on the ISL and FortiLink trunks