Fortinet NSE 8 - Recertification Sample Questions:

1. Refer to the exhibit.

You log into FortiManager, access the Device Manager window and notice that one of the managed devices is not in normal status.
Referring to the exhibit, which two statements correctly describe the status and result of the affected device? (Choose two.)

A) The changed configuration on the FortiGate will remain the next time that the device configuration is pushed from FortiManager.
B) The device configuration was changed on both the local FortiGate side and the FortiManager side; auto-update is disabled.
C) The changed configuration on the FortiGate will be overwritten in favor of what is on the FortiManager the next time that the device configuration is pushed.
D) The device configuration was changed on the local FortiGate side only; auto-update is disabled.

2. You have replaced an explicit proxy Web filter with a FortiGate.
The human resources department requires that all URLs be logged. Users are reporting that their browsers are now indicating certificate errors as shown in the exhibit.
Which step is a valid solution to the problem?

A) Change the Web filter policies on the FortiGate to only do certificate inspection.
B) Make sure that the affected users' browsers are no longer set to use the explicit proxy.
C) Import the FortiGate's SSL CA certificate into the Web browsers.
D) Make a Group Policy to install the FortiGate's SSL certificate as a trusted host certificate on the Web browser.

3. Refer to the exhibits.
Topology

Configuration

The exhibits show a diagram of a requested topology and the base IPsec configuration.
A customer asks you to configure ADVPN via two internet underlays. The requirement is that you use one interface with a single IP address on DC FortiGate.
In this scenario, which feature should be implemented to achieve this requirement?

A) Change advpn2 to IKEv1
B) Use network-overlay id
C) Use local-id
D) Use peer-id

4. Refer to the exhibit showing a FortiView monitor screen.

After a Secure SD-WAN implementation a customer reports that in FortiAnalyzer under FortiView Secure SD-WAN Monitor there is No Device for selection.
What can cause this issue?

A) Upload option from FortiGate to FortiAnalyzer is not set as a real time.
B) sla-fail-log-period and sla-pass-log-period on FortiGate health check is not set.
C) ADOM 1 is set as a Fabric ADOM.
D) Extended logging is not enabled on FortiGate.

5. Virtual Domains (VDOMs) allow a FortiGate administrator to do what?

A) Group multiple physical interfaces to form a single virtual interface.
B) Create multiple VLANs in a single physical interface,
C) Group two or more FortiGate units to form a single virtual device.
D) Split a physical FortiGate unit into multiple virtual devices.

Solutions: