Fortinet NSE8_812 Exam Practice Questions (P. 2)
- Full Access (117 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #6
Refer to the exhibit.

FortiManager is configured with the Jinja Script under CLI Templates shown in the exhibit.
Which two statements correctly describe the expected behavior when running this template? (Choose two.)

FortiManager is configured with the Jinja Script under CLI Templates shown in the exhibit.
Which two statements correctly describe the expected behavior when running this template? (Choose two.)
- AThe Jinja template will automatically map the interface with “WAN” role on the managed FortiGate
- BThe template will work if you change the variable format to $(WAN).
- CThe template will work if you change the variable format to {{ WAN }}.Most Voted
- DThe administrator must first manually map the interface for each device with a meta fieldMost Voted
- EThe template will fail because this configuration can only be applied with a CLI or TCL script.
Correct Answer:
AD
AD
send
light_mode
delete
Question #7
SD-WAN is configured on a FortiGate. You notice that when one of the internet links has high latency the time to resolve names using DNS from FortiGate is very high.
You must ensure that the FortiGate DNS resolution times are as low as possible with the least amount of work.
What should you configure?
You must ensure that the FortiGate DNS resolution times are as low as possible with the least amount of work.
What should you configure?
- AConfigure local out traffic to use the outgoing interface based on SD-WAN rules with a manual defined IP associated to a loopback interface and configure an SD-WAN rule from the loopback to the DNS server.
- BConfigure an SD-WAN rule to the DNS server and use the FortiGate interface IPs in the source address.
- CConfigure two DNS servers and use DNS servers recommended by the two internet providers.
- DConfigure local out traffic to use the outgoing interface based on SD-WAN rules with the interface IP and configure an SD-WAN rule to the DNS server.Most Voted
Correct Answer:
D
D
send
light_mode
delete
Question #8
Refer to the exhibits.
Exhibit A -

Exhibit B -

Exhibit C -

A customer is trying to set up a VPN with a FortiGate, but they do not have a backup of the configuration. Output during a troubleshooting session is shown in the exhibits A and B and a baseline VPN configuration is shown in Exhibit C.
Referring to the exhibits, which configuration will restore VPN connectivity?
Exhibit A -

Exhibit B -

Exhibit C -

A customer is trying to set up a VPN with a FortiGate, but they do not have a backup of the configuration. Output during a troubleshooting session is shown in the exhibits A and B and a baseline VPN configuration is shown in Exhibit C.
Referring to the exhibits, which configuration will restore VPN connectivity?
send
light_mode
delete
Question #9
An HA topology is using the following configuration:

Based on this configuration, how long will it take for a failover to be detected by the secondary cluster member?

Based on this configuration, how long will it take for a failover to be detected by the secondary cluster member?
send
light_mode
delete
Question #10
Refer to the exhibit.

You have deployed a security fabric with three FortiGate devices as shown in the exhibit.
FGT_2 has the following configuration:

FGT_1 and FGT_3 are configured with the default setting.
Which statement is true for the synchronization of fabric-objects?

You have deployed a security fabric with three FortiGate devices as shown in the exhibit.
FGT_2 has the following configuration:

FGT_1 and FGT_3 are configured with the default setting.
Which statement is true for the synchronization of fabric-objects?
- AObjects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate
- BObjects from the root FortiGate will only be synchronized to FGT_2
- CObjects from the root FortiGate will not be synchronized to any downstream FortiGate
- DObjects from the root FortiGate will only be synchronized to FGT_3Most Voted
Correct Answer:
A
A
send
light_mode
delete
All Pages