NSE8_812無料問題集「Fortinet NSE 8 - Written Exam (NSE8

質問 1

Refer to the exhibits, which show a topology and diagnostic commands.

Which two statements about the path resolution are true? (Choose two.)

（A）Latency is the quality criteria.

（B）Packet-loss is the quality criteria.

（C）wan2 is currently used as an outgoing interface.

（D）wan1 is currently used as an outgoing interface.

正解：A 解答を投票する

質問 2

You are deploying a FortiExtender (FEX) on a FortiGate-60F. The FEX will be managed by the FortiGate.
You anticipate high utilization. The requirement is to minimize the overhead on the device for WAN traffic.
Which action achieves the requirement in this scenario?

（A）Add a switch between the FortiGate and FEX.

（B）Enable CAPWAP connectivity between the FortiGate and the FortiExtender.

（C）Add a VLAN under the FEX-WAN interface on the FortiGate.

（D）Change connectivity between the FortiGate and the FortiExtender to use VLAN Mode

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You are designing a setup where the FortiGate device is connected to two upstream ISPs using BGP. Part of the requirement is that you must be able to refresh the route advertisements manually without disconnecting the BGP neighborships.
Which feature must you enable on the BGP neighbors to accomplish this goal?

（A）Graceful-restart

（B）Synchronization

（C）Soft-reconfiguration

（D）Deterministic-med

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Review the following FortiGate-6000 configuration excerpt:

Based on the configuration, which statement is correct regarding SNAT source port partitioning behavior?

（A）It dynamically distributes SNAT source ports to operating FPCs or FPMs.

（B）It statically distributes SNAT source ports to operating FPCs or FPMs

（C）It equally distributes SNAT source ports across chassis slots.

（D）It is the default SNAT configuration and preserves active sessions when an FPC or FPM goes down.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Refer to the exhibit.

You are operating an internal network with multiple OSPF routers on the same LAN segment. FGT_3 needs to be added to the OSPF network and has the configuration shown in the exhibit. FGT_3 is not establishing any OSPF connection.
What needs to be changed to the configuration to make sure FGT_3 will establish OSPF neighbors without affecting the DR/BDR election?

（A）

（B）

（C）

（D）

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Refer to the exhibit, which shows a FortiGate configuration snippet.

A customer in Costa Rica has a FortiGate with SD-WAN configured to use a VPN connection to the United States to browse the internet using a public IP from that country. They would like to enable the SD-WAN rule using a webhook.
Which configuration must be added to the FortiGate, and which type of HTTP request must be used to accomplish this? (Choose two.)

（A）

（B）

（C）

（D）

正解：B、D 解答を投票する

質問 7

You must configure an environment with dual-homed servers connected to a pair of FortiSwitch units using an MCLAG.
Multicast traffic is expected in this environment, and you should ensure unnecessary traffic is pruned from links that do not have a multicast listener.
In which two ways must you configure the igmps-f lood-traffic and igmps-flood-report settings? (Choose two.)

（A）disable on ICL trunks

（B）enable on the ISL and FortiLink trunks

（C）enable on ICL trunks

（D）disable on the ISL and FortiLink trunks

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

You deployed a fully loaded FG-7121F in the data center and enabled sslvpn-load-balance. Based on the behavior of this feature which statement is correct?

（A）To have better traffic distribution you should use IP pools that increment in multiples of 12.

（B）If an FPM goes down, SSL VPN IP pool IP addresses will be re-allocated to the remaining FPMs.

（C）You can use src-ip or dst-ip-dport on dp-load-distribution-method to make SSL VPN load balancing work as expected.

（D）Enabling SSL VPN load balancing will clear the session table.

正解：C 解答を投票する

質問 9

You have configured a Site-to-Site IPsec VPN tunnel between a FortiGate and a third-party device but notice that one of the error counters on the tunnel interface keeps increasing.

Which two configuration options can resolve this problem? (Choose two.)

（A）Enable DF-bit honoring in the global settings.

（B）Enable Forward Error Correction (FEC) on the VPN interface for egress traffic.

（C）Adjust the MTU of the physical interface to which the IPsec tunnel is bound.

（D）Adjust the MTU of the IPsec interface.

正解：A、D 解答を投票する

質問 10

Refer to the exhibit showing a FortiView monitor screen.

After a Secure SD-WAN implementation a customer reports that in FortiAnalyzer under FortiView Secure SD-WAN Monitor there is No Device for selection.
What can cause this issue?

（A）Extended logging is not enabled on FortiGate.

（B）Upload option from FortiGate to FortiAnalyzer is not set as a real time.

（C）sla-fail-log-period and sla-pass-log-period on FortiGate health check is not set.

（D）ADOM 1 is set as a Fabric ADOM.

正解：B 解答を投票する

NSE8_812 無料問題集「Fortinet NSE 8 - Written Exam (NSE8_812)」

弊社を連絡する

関連リンク

トップ試験