Fortinet NSE 8 - Recertification Sample Questions:

1. A legacy router has been replaced by a FortiGate device. The FortiGate has inherited the management IP address of the router and now the network administrator needs to remove the router from the FortiSIEM configuration.
Which two statements about this operation are true? (Choose two.)

A) The router will be completely deleted from the FortiSIEM database.
B) FortiSIEM will move the router device into the Decommission folder.
C) FortiSIEM will discover a new device for the FortiGate with the same IP.
D) By default, FortiSIEM can only parser event logs for FortiGate devices.

2. You are asked to establish a VPN tunnel with a service provider using a third-party VPN device.
The service provider has assigned subnet 30.30.30.0/24 for your outgoing traffic going towards the services hosted by the provider on network 20.20.20.0/24.
You have multiple computers which will be accessing the remote services hosted by the service provider.
Which three configuration components meet these requirements? (Choose three.)

A) Configure IPsec phase 2 proxy IDs for a source of 30.30.30.0/24 and destination of
20.20.20.0/24.
B) Configure IPsec phase 2 proxy IDs for a source of 10.10.10.0/24 and destination of
20.20.20.0/24.
C) Configure an IP Pool of Type One-to-One for range 30.30.30.10-30.30.30.10.
Enable NAT on a policy from your LAN towards the VPN tunnel and select that pool.
D) Configure an IP Pool of type Overload for range 30.30.30.10-30.30.30.10.
Enable NAT on a policy from your LAN forwards the VPN tunnel and select that pool.
E) Configure a static route towards the VPN tunnel for 20.20.20.0/24.

3. Which three statements about throughput on a wireless network are true? (Choose three.)

A) Because of the full-duplex nature of the medium and the minimal overhead generated by CSMA/CA, the actual aggregate throughput is typically close to the data rate.
B) A wireless device labelled as 300 Mbps should be expected to provide a throughput of 300Mbps.
C) Reducing the duty cycles of the wireless media by generating fewer beacons may improve throughput.
D) Be careful to ensure the capabilities of the wireless clients match those of the access points, in order to achieve higher throughput.
E) Because of the higher level of RF noise that is typical in the 2.4 GHz ISM band, throughput of 2.4 GHz devices will typically be less than 5 GHz devices.

4. Refer to the exhibit.

You need to apply the security features listed below to the network shown in the exhibit.
* High grade DDoS protection
* Web security and load balancing for Server 1 and Server 2
* Solution must be PCI DSS compliant
* Enhanced security to DNS 1 and DNS 2
What are three solutions for this scenario? (Choose three.)

A) FortiADC for VDOM-B
B) FortiWeb for VDOM-A
C) FortiADC for VDOM-A
D) FortiDDoS between FG1 and FG2 and VDOMs
E) FortiDDoS between FG1 and FG2 and the Internet

5. A customer wants to implement a RADIUS Single Sign On (RSSO) solution for multiple FortiGate devices. The customer's network already includes a RADIUS server that can generate the logon and logoff accounting records. However, the RADIUS server can send those records to only one destination. What should the customer do to overcome this limitation?

A) Use the RADIUS accounting proxy feature available in FortiAuthenticator devices.
B) Send the RADIUS records to an LDAP server and add the LDAP server to the FortiGate configuration .
C) Send the RADIUS records to one of the FortiGate devices, which can replicate them to the other FortiGate units.
D) Send the RADIUS records to an RSSO Collector Agent.

Solutions: