Study with NSE8_813 Actual Test Questions

Fortinet NSE8_813 Exam Overview:

Fortinet NSE8_813 Exam Syllabus Topics:

Fortinet NSE 8 - Recertification Sample Questions:

1. Refer to the exhibit.

As shown in the exhibit, a FortiADC is load-balancing IPv4 traffic between two next-hop routers.
The FortiADC does not know the IP addresses of the servers. Also, the FortiADC is doing Layer 7 content inspection and modification.
In this scenario, which application delivery control is configured in the FortiADC?

A) Layer 3
B) Layer 7
C) Layer 2
D) Layer 4

2. You cannot ping the FortiGate default gateway 10.10.10.1 from the FortiGate CLI. The FortiGate interface facing the default gateway is wan1 and its IP address is 10.10.10.254/24. During the initial troubleshooting tests, you confirm that you can ping other IP addresses in the 10.10.10.0/24 subnet from the FortiGate CLI without packets lost.
Which two CLI commands will help you to troubleshoot this problem? (Choose two.)

A) diagnose ip arp list
B) diag sniffer packet wan1 'arp and host 10.10.10.1'
C) diagnose hardware deviceinfo nic wan1
D) diagnose debug flow filter saddr 10.10.10.1
diagnose debug flow trace start 10

3. A customer is planning on moving their secondary data center to a cloud-based IaaS. They want to place all the Oracle-based systems on Oracle Cloud, while the other systems will be on Microsoft Azure with ExpressRoute service to their main data center.
They have about 200 branches with two internet services as their only WAN connections. As a security consultant you are asked to design an architecture using Fortinet products with security, redundancy, and performance as a priority.
Which two design options are true based on these requirements? (Choose two.)

A) Branch FortiGate devices must be configured as VPN clients for the branches' internal network to be able to access Oracle services without using public IPs.
B) Two ExpressRoute services to the main data center are required to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge.
C) Use FortiGate VM for IPSEC over ExpressRoute, as traffic is not encrypted by Azure.
D) Systems running on Azure will need to go through the main data center to access the services on Oracle Cloud.

4. Refer to The exhibit, which shows a topology diagram.

A customer wants to use SD-WAN for traffic generated from the data center towards Branches.
SD- WAN on HUB should follow the underlay condition on each Branch and the solution should be scalable for hundreds of Branches.
Which SD WAN-Rules strategy should be used?

A) Lowest Cost SLA
B) Best Quality based on route-tags
C) Auto based on link quality
D) Manual based on route-tags

5. Refer to the exhibit.

Only users authenticated in FortiGate-B can reach the server. A customer wants to deploy a single sign-on solution for IPsec VPN users. Once a user is connected and authenticated to the VPN in FortiGate-A, the user does not need to authenticate again in FortiGate-B to reach the server.
Referring to the exhibit, which two actions satisfy this requirement? (Choose two.)

A) Use FortiAuthenticator.
B) Use the Collector Agent.
C) Use Kerberos authentication.
D) FortiGate-A must generate a RADIUS accounting packet.

Solutions: