We're so confident of our products that we provide no hassle product exchange.
Fortinet NSE 8 - Recertification Sample Questions:
1. Refer to the exhibit.
You have deployed several perimeter FortiGate devices with internal segmentation FortiGate devices behind them. All FortiGate devices are logging to FortiAnalyzer. When you search the logs in FortiAnalyzer for denied traffic, you see numerous log messages, as shown in the exhibit, on your perimeter FortiGate device only.
Which two actions will reduce the number of these log messages? (Choose two.)
A) Configure the internal FortiGate devices to communicate to FortiGuard using port 8888.
B) Disable DNS events logging from FortiGate in the config log fortianalyzer filter section.
C) Apply an application control profile to the perimeter FortiGate devices that does not inspect DNS traffic to the outbound firewall policy.
D) Remove DNS signatures from the IPS profile applied to the outbound firewall policy.
2. Refer to the exhibit that shows VPN debugging output.
The VPN tunnel between headquarters and the branch office is not being established.
What is causing the problem?
A) The Phase-1 encryption algorithms are not matching.
B) There is no matching Diffie-Hellman Group.
C) There is a mismatch in the ISAKMP SA lifetime.
D) HQ is using IKE v1 and the branch office is using with IKE v2.
3. A customer wants to secure the network shown on the exhibit with a full redundancy design.
Which security design would you use?
A) Place a Forti Gate FGCP Cluster between DD and AA, then connect it to SWl, SW2, SW3, and SW4.
B) Place a Forti Gate FGCP Cluster between DD and FF, then connect it to SWl, SW2, SW3, and SW4.
C) Place a Forti Gate FGCP Cluster between BB and CC, then connect it to SWl, SW2, SW3, and SW4.
D) Place a Forti Gate FGCP Cluster between BB and AA, then connect it to SWl, SW2, SW3, and SW4.
4. Refer to the exhibit.
A customer wants to automate the creation and configuration of FortiGate VM instances in a VMware vCenter environment using Terraform. They have the creation part working with the code shown in the exhibit.
Which code snippet will allow Terraform to automatically connect to a newly deployed FortiGate if its IP was dynamically assigned by VMware NSX-T?
A) 
B) 
C) 
D) 
5. You are managing a FortiAnalyzer appliance. After an upgrade, you notice that the unit no longer displays historical logs, reports do not produce any data, and FortiView summary views are empty. However, you notice that the unit is receiving logs on the dashboard widgets.
Which step resolves this problem?
A) Restore the unit settings from a previous backup.
B) Execute the CLI command exec sql-local rebuild-db.
C) Execute the CLI command diag sql remove hcache.
D) Execute the CLI command exec sql-local reinsert-logs.
Solutions:
| Question # 1 Answer: A,B | Question # 2 Answer: A | Question # 3 Answer: C | Question # 4 Answer: D | Question # 5 Answer: B |
By Blair
