Fortinet NSE8_812 Practice Test : Free Online Preparation

Free Fortinet NSE8_812 Exam Questions

To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked with

configuring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.

Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interface

options referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)

A FortiGate cluster (CL-1) protects a data center hosting multiple web applications. A pair of FortiADC

devices are already configured for SSL decryption (FAD-1), and re-encryption (FAD-2). CL-1 must accept

unencrypted traffic from FAD-1, perform application detection on the plain-text traffic, and forward the

inspected traffic to FAD-2.

The SSL-Offload-App-Detect application list and SSL-Offload protocol options profile are applied to the

firewall policy handling the web application traffic on CL-1.

Given this scenario, which two configuration tasks must the administrator perform on CL-1? (Choose two.)

You are operating an internal network with multiple OSPF routers on the same LAN segment. FGT_3 needs to

be added to the OSPF network and has the configuration shown in the exhibit. FGT_3 is not establishing any

OSPF connection.

What needs to be changed to the configuration to make sure FGT_3 will establish OSPF neighbors without

affecting the DR/BDR election?

A FortiWeb appliance is configured for load balancing web sessions to internal web servers. The Server Pool

is configured as shown in the exhibit.

How will the sessions be load balanced between server 1 and server 2 during normal operation?