Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home Fortinet NSE8_812

Fortinet NSE8_812 Exam Practice Questions (P. 5)

  • Full Access (117 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #21
Refer to the exhibits.

Exhibit A -


Exhibit B -

A customer wants to deploy 12 FortiAP 431F devices on high density conference center, but they do not currently have any PoE switches to connect them to. They want to be able to run them at full power while having network redundancy.
From the FortiSwitch models and sample retail prices shown in the exhibit, which build of materials would have the lowest cost, while fulfilling the customer’s requirements?
  1. A
    1x FortiSwitch 248E-FPOE
  2. B
    2x FortiSwitch 224E-POE
  3. C
    2x FortiSwitch 248E-FPOE
  4. D
    2x FortiSwitch 124E-FPOE

Correct Answer:
B

Question #22
Refer to the exhibits.

Exhibit A -


Exhibit B -

A customer is looking for a solution to authenticate the clients connected to a hardware switch interface of a FortiGate 400E.
Referring to the exhibits, which two conditions allow authentication to the client devices before assigning an IP address? (Choose two.)
  1. A
    FortiGate devices with NP6 and hardware switch interfaces cannot support 802.1X authentication
  2. B
    Devices connected directly to ports 3 and 4 can perform 802.1X authentication
  3. C
    Ports 3 and 4 can be part of different switch interfaces
  4. D
    Client devices must have 802.1X authentication enabled

Correct Answer:
BD

Question #23
You want to use the MTA adapter feature on FortiSandbox in an HA-Cluster.
Which statement about this solution is true?
  1. A
    The configuration of the MTA Adapter Local Interface is different than on port1
  2. B
    The MTA adapter is only available in the primary node
  3. C
    The MTA adapter mode is only detection mode
  4. D
    The configuration is different than on a standalone device

Correct Answer:
D

Question #24
Refer to the exhibit showing the history logs from a FortiMail device.

Which FortiMail email security feature can an administrator enable to treat these emails as spam?
  1. A
    DKIM validation in a session profile
  2. B
    Sender domain validation in a session profile
  3. C
    Impersonation analysis in an antispam profile
  4. D
    Soft fail SPF validation in an antispam profile

Correct Answer:
C

Question #25
Refer to the exhibits, which show a firewall policy configuration and a network topology.

Configuration -


Topology -

An administrator has configured an inbound SSL inspection profile on a FortiGate device (FG-1) that is protecting a data center hosting multiple web pages.
Given the scenario shown in the exhibits, which certificate will FortiGate use to handle requests to xyz.com?
  1. A
    FortiGate will fall-back to the default Fortinet_CA_SSL certificate
  2. B
    FortiGate will reject the connection since no certificate is defined
  3. C
    FortiGate will use the Fortmet_CA_Untrusted certificate for the untrusted connection
  4. D
    FortiGate will use the first certificate in the server-cert list—the abc.com certificate

Correct Answer:
D

Previous Questions Next Questions

All Pages