NSE8_812無料問題集「Fortinet NSE 8 - Written Exam (NSE8

質問 1

A customer's cybersecurity department needs to implement security for the traffic between two VPCs in AWS, but these belong to different departments within the company. The company uses a single region for all their VPCs.
Which two actions will achieve this requirement while keeping separate management of each department's VPC? (Choose two.)

（A）Migrate all the instances to the same VPC and create 1AM accounts for each department, then implement a new subnet for a FortiGate auto-scaling group and use routing tables to force the traffic through the FortiGate cluster.

（B）Create an 1AM account for the cybersecurity department to manage both existing VPC, create a FortiGate HA Cluster on each VPC and IPSEC VPN to force traffic between the VPCs through the FortiGate clusters

（C）Create a VPC with a FortiGate auto-scaling group with a Transit Gateway attached to the three VPC to force routing through the FortiGate cluster

（D）Create a transit VPC with a FortiGate HA cluster, connect to the other two using VPC peering, and use routing tables to force traffic through the FortiGate cluster.

正解：C、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Refer to the exhibits.
The exhibits show a diagram of a requested topology and the base IPsec configuration.
A customer asks you to configure ADVPN via two internet underlays. The requirement is that you use one interface with a single IP address on DC FortiGate.
In this scenario, which feature should be implemented to achieve this requirement?

（A）Change advpn2 to IKEv1

（B）Use peer-id

（C）Use local-id

（D）Use network-overlay id

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

You want to use the MTA adapter feature on FortiSandbox in an HA-Cluster. Which statement about this solution is true?

（A）The configuration of the MTA Adapter Local Interface is different than on port1.

（B）The MTA adapter mode is only detection mode.

（C）The configuration is different than on a standalone device.

（D）The MTA adapter is only available in the primary node.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

An automation stitch was configured using an incoming webhook as the trigger named 'my_incoming_webhook'. The action is configured to execute the CLI Script shown:

（A）

（B）

（C）

（D）

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Refer to the exhibit showing an SD-WAN configuration.

According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?

（A）port16 and port1

（B）port1 and port15

（C）port16 and port15

（D）port1 and port1

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Refer to the exhibits.

A customer is looking for a solution to authenticate the clients connected to a hardware switch interface of a FortiGate 400E.
Referring to the exhibits, which two conditions allow authentication to the client devices before assigning an IP address? (Choose two.)

（A）Devices connected directly to ports 3 and 4 can perform 802 1X authentication.

（B）Ports 3 and 4 can be part of different switch interfaces.

（C）FortiGate devices with NP6 and hardware switch interfaces cannot support 802.1X authentication.

（D）Client devices must have 802 1X authentication enabled

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE8_812 無料問題集「Fortinet NSE 8 - Written Exam (NSE8_812)」

弊社を連絡する

関連リンク

トップ試験