Fortinet NSE 8 Written Exam (NSE8_811) Sample Questions:

1. Click the Exhibit button.
Your customer is using dynamic routing to exchange the default route between two FortiGates using OSPFv2. The output of the get router info ospf neighbor command shows that the neighbor is up, but the default route does not appear in the routing neighbor shown below:

According to the exhibit, what is causing the problem?

A) FG2 is within the wrong OSPF area.
B) There is an OSPF interface network-type mismatch.
C) A prefix for the detail route is missing
D) OSPF requires the redistribution of connected networks.

2. Click the exhibit button.
A FortiGate device is configured to authenticate SSL VPN users using digital certificates. Part of the FortiGate configuration is shown in the exhibit.
Which two statements are true in this scenario? (Choose two.)

A) The authentication will fail if the certificate does not contain user principle name (UPN) information.
B) The authentication will fail if the user certificate does not contain the CA_Cert string in the Failed.
C) The authentication will fail if the OCSP server is down.
D) OCSP is used to verify that the user-signed certificate has not expired.

3. Exhibit
Click the Exhibit button.
You are trying to configure Link-Aggregation Group (LAG), but ports A and B do not appear on the list of member options. Referring to the exhibit, which statement is correct in this situation?

A) The FortiGate model being used does not support LAG.
B) The FortiGate interfaces are defective and require replacement.
C) The FortiGate SFP+ slot does not have the correct module.
D) The FortiGate model does not have an Integrated Switch Fabric (ISF).

4. You are building a FortiGala cluster which is stretched over two locations. The HA connections for the cluster are terminated on the data centers. Once the FortiGates have booted, they do form a cluster. The network operators inform you that CRC eoors are present on the switches where the FortiGAtes are connected.
What would you do to solve this problem?

A) Replace the caables where the CRC errors occur.
B) Change the ethertype for the HA packets.
C) Place the HA interfaces in dedicated VLANs.
D) Set the speedduplex setting to 1 Gbps /Full Duplex.

5. Refer to the exhibit.

The exhibit shows a full-mesh topology between FortiGate and FortiSwitch devices. To deploy this configuration, two requirements must be met:
* 20 Gbps full duplex connectivity is available between each FortiGate and the FortiSwitch devices
* The FortiGate HA must be in AP mode
Referring to the exhibit, what are two actions that will fulfill the requirements? (Choose two.)

A) Configure the master FortiGate with one LAG and FortiLink split interface disabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.
B) Configure both FortiSwitch devices as peers with ISL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
C) Configure both FortiSwitch devices as peers with ICL over cable E, create one MCLAG on ports connected to cables A and C, and create another MCLAG on ports connected to cables B and D.
D) Configure the master FortiGate with one LAG and FortiLink split interface enabled on ports connected to cables A and C and make sure the same ports are used for cables B and D on the slave.

Solutions: