Fortinet NSE 8 - Recertification Sample Questions:

1. Refer to the exhibit.

You configured AV and Web filtering for your outgoing Internet connections. You later notice that not all Web sessions are being inspected and you start troubleshooting the problem.
Referring to the exhibit, what can be causing this problem?

A) There are problems with the connection to the Web filter servers, therefore the Web session cannot be categorized.
B) The SSL inspection options are not set to deep inspection.
C) Web filtering is not licensed; therefore, no inspection occurs.
D) The Web session is using QUIC which is not inspected by the FortiGate.

2. Refer to the exhibit.

A customer wants to automate the creation and configuration of FortiGate VM instances in a VMware vCenter environment using Terraform. They have the creation part working with the code shown in the exhibit.
Which code snippet will allow Terraform to automatically connect to a newly deployed FortiGate if its IP was dynamically assigned by VMware NSX-T?

A)

B)

C)

D)

3. You are asked to write a FortiAnalyzer report that lists the session that has consumed the most bandwidth. You are required to include the source IP, destination IP, application, application category, hostname, and total bandwidth consumed.
Which dataset meets these requirements?

A) select from_itime(itime) as timestamp, sourceip, destip, app, appcat, hostname, sum(coalesce('sentbyte', O)+coalesce('rcvdbyte", O)) as bandwidth from $log where $filter LIMIT 1
B) select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte",
0) +coalesce('recbyte", O)) as bandwidth from $log where $filter LIMIT 1
C) select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte",
0) +coalesce('recbyte ", O)) as bandwidth from $log where $filter LIMIT 1
D) select from_itime(itime) as timestamp, srcip, dstip, app, appcat, hostname, sum(coalesce('sentbyte",
0) +coalesce('rcvdbyte", O)) as bandwidth from $log where $filter LIMIT 1

4. Refer to the exhibit. A customer has deployed a FortiGate 300E with virtual domains (VDOMs) enabled in the multi-VDOM mode. There are three VDOMs: Root is for management and internet access, while VDOM 1 and VDOM 2 are used for segregating internal traffic. AccountVInk and SalesVInk are standard VDOM links in Ethernet mode.
Given the exhibit, which two statements below about VDOM behavior are correct? (Choose two.)

A) OSPF routing can be configured between VDOM 1 and Root VDOM without any configuration changes to AccountVInk
B) The VDOM links are in Ethernet mode because they have IP addressed assigned on both sides
C) Root VDOM is an Admin type VDOM, while VDOM 1 and VDOM 2 are Traffic type VDOMs
D) Traffic on AccountVInk and SalesVInk will not be accelerated
E) You can apply OSPF routing on the VDOM link in either PPP or Ethernet mode

5. FortiGatel has a gateway-to-gateway IPsec VPN to FortiGate2. The entire IKE negotiation between FortiGatel and FortiGate2 is on UDP port 500. A PC on FortuGate2's local area network is sending continuous ping requests over the VPN tunnel to a PC of FortiGatel's local area network. No other traffic is sent over the tunnel.
Which statement is true on this scenario?

A) FortiGatel sends an R-U-TH ERE packet if pings stop for 300 seconds and no IKE packet is received during this period.
B) FortiGatel sends an R-U-THERE packet if pings stop for 60 seconds and no IKE packet is received during this period.
C) FortiGatel sends an R-U-TH ERE packet every 60 seconds while ping traffic is flowing.
D) FortiGatel sends an R-U-TH ERE packet every 300 seconds while ping traffic is flowing.

Solutions: