NSE8_812.pdf
Q: 1
Refer to the exhibit.
You are operating an internal network with multiple OSPF routers on the same LAN segment. FGT_3
needs to be added to the OSPF network and has the configuration shown in the exhibit. FGT_3 is not
establishing any OSPF connection.
What needs to be changed to the configuration to make sure FGT_3 will establish OSPF neighbors
without affecting the DR/BDR election?
A)
B)
C)
D)

You are operating an internal network with multiple OSPF routers on the same LAN segment. FGT_3
needs to be added to the OSPF network and has the configuration shown in the exhibit. FGT_3 is not
establishing any OSPF connection.
What needs to be changed to the configuration to make sure FGT_3 will establish OSPF neighbors
without affecting the DR/BDR election?
A)
B)
C)
D)

Options
Q: 2
A customer's cybersecurity department needs to implement security for the traffic between two
VPCs in AWS, but these belong to different departments within the company. The company uses a
single region for all their VPCs.
Which two actions will achieve this requirement while keeping separate management of each
department's VPC? (Choose two.)
Options
Q: 3
Refer to the exhibit.
You have been tasked with replacing the managed switch Forti Switch 2 shown in the topology.
Which two actions are correct regarding the replacement process? (Choose two.)
You have been tasked with replacing the managed switch Forti Switch 2 shown in the topology.
Which two actions are correct regarding the replacement process? (Choose two.)Options
Q: 4
You are deploying a FortiExtender (FEX) on a FortiGate-60F. The FEX will be managed by the
FortiGate. You anticipate high utilization. The requirement is to minimize the overhead on the device
for WAN traffic.
Which action achieves the requirement in this scenario?
Options
Q: 5
An HA topology is using the following configuration:
Based on this configuration, how long will it take for a failover to be detected by the secondary
cluster member?
Based on this configuration, how long will it take for a failover to be detected by the secondary
cluster member?Options
Q: 6
Refer to the exhibit.
You are deploying a FortiGate 6000F. The device should be directly connected to a switch. In the
future, a new hardware module providing higher speed will be installed in the switch, and the
connection to the FortiGate must be moved to this higher-speed port.
You must ensure that the initial FortiGate interface connected to the switch does not affect any other
port when the new module is installed and the new port speed is defined.
How should the initial connection be made?
You are deploying a FortiGate 6000F. The device should be directly connected to a switch. In the
future, a new hardware module providing higher speed will be installed in the switch, and the
connection to the FortiGate must be moved to this higher-speed port.
You must ensure that the initial FortiGate interface connected to the switch does not affect any other
port when the new module is installed and the new port speed is defined.
How should the initial connection be made?Options
Q: 7
You are running a diagnose command continuously as traffic flows through a platform with NP6 and
you obtain the following output:
Given the information shown in the output, which two statements are true? (Choose two.)
Given the information shown in the output, which two statements are true? (Choose two.)Options
Q: 8
Refer to the exhibit showing an SD-WAN configuration.
According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet
172.16.205.0/24, which outgoing interfaces will be used?
Options
Q: 9
Refer to the exhibit.
A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be
integrated with FortiOS and there is an Active Directory server.
Given the configuration shown in the exhibit, which two statements about the installation are
correct? (Choose two.)
A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be
integrated with FortiOS and there is an Active Directory server.
Given the configuration shown in the exhibit, which two statements about the installation are
correct? (Choose two.)Options
Q: 10
Refer to the exhibits.
A customer is looking for a solution to authenticate the clients connected to a hardware switch
interface of a FortiGate 400E.
Referring to the exhibits, which two conditions allow authentication to the client devices before
assigning an IP address? (Choose two.)
A customer is looking for a solution to authenticate the clients connected to a hardware switch
interface of a FortiGate 400E.
Referring to the exhibits, which two conditions allow authentication to the client devices before
assigning an IP address? (Choose two.)Options
Question 1 of 10