Free Fortinet NSE8_812 Exam Dumps Questions & Answers

A customer's cybersecurity department needs to implement security for the traffic between two VPCs in AWS, but these belong to different departments within the company. The company uses a single region for all their VPCs.
Which two actions will achieve this requirement while keeping separate management of each department's VPC? (Choose two.)

• A.  Create a transit VPC with a FortiGate HA cluster, connect to the other two using VPC peering, and use routing tables to force traffic through the FortiGate cluster.
• B.  Create a VPC with a FortiGate auto-scaling group with a Transit Gateway attached to the three VPC to force routing through the FortiGate cluster
• C.  Migrate all the instances to the same VPC and create 1AM accounts for each department, then implement a new subnet for a FortiGate auto-scaling group and use routing tables to force the traffic through the FortiGate cluster.
• D.  Create an 1AM account for the cybersecurity department to manage both existing VPC, create a FortiGate HA Cluster on each VPC and IPSEC VPN to force traffic between the VPCs through the FortiGate clusters

You are migrating the branches of a customer to FortiGate devices. They require independent routing tables on the LAN side of the network.
After reviewing the design, you notice the firewall will have many BGP sessions as you have two data centers (DC) and two ISPs per DC while each branch is using at least 10 internal segments.
Based on this scenario, what would you suggest as the more efficient solution, considering that in the future the number of internal segments, DCs or internet links per DC will increase?

• A.  No change in design is needed as even small FortiGate devices have a large memory capacity.
• B.  Implement network-id, neighbor-group and increase the advertisement-interval
• C.  Redesign the SD-WAN deployment to only use a single VPN tunnel and segment traffic using VRFs on BGP
• D.  Acquire a FortiGate model with more capacity, considering the next 5 years growth.

Refer to the exhibit, which shows a FortiGate configuration snippet.

A customer in Costa Rica has a FortiGate with SD-WAN configured to use a VPN connection to the United States to browse the internet using a public IP from that country. They would like to enable the SD-WAN rule using a webhook.
Which configuration must be added to the FortiGate, and which type of HTTP request must be used to accomplish this? (Choose two.)

• A. 
• B. 
• C. 
• D. 

You are performing a packet capture on a FortiGate 2600F with the hyperscale licensing installed. You need to display on screen all egress/ingress packets from the port16 interface that have been offloaded to the NP7.
Which three commands need to be run? (Choose three.)

• A.  diagnose npu sniffer filter intf port16
• B.  diagnose npu sniffer filter dir 2
• C.  diagnose sniffer packet npudbg
• D.  diagnose sniffer packet port16
• E.  diagnose npu sniffer filter selector 0

Refer to the exhibit.

A customer has deployed a FortiGate 200F high-availability (HA) cluster that contains & TPM chip. The exhibit shows output from the FortiGate CLI session where the administrator enabled TPM.
Following these actions, the administrator immediately notices that both FortiGate high availability (HA) status and FortiManager status for the FortiGate are negatively impacted.
What are the two reasons for this behavior? (Choose two.)

• A.  The FortiGate has not finished the auto-update process to synchronize the new configuration to FortiManager yet.
• B.  Configuration for TPM is not synchronized between FortiGate HA cluster members.
• C.  TPM functionality is not yet compatible with FortiGate HA.
• D.  The administrator needs to manually enter the hex private data encryption key in FortiManager.
• E.  The private-data-encryption key entered on the primary did not match the value that the TPM expected.