Question 1

Refer to the exhibit.

The exhibit shows the forensics analysis of an event detected by the FortiEDR core

In this scenario, which statement is correct regarding the threat?

Options :

A : This is an exfiltration attack and has been stopped by FortiEDR.

B : This is an exfiltration attack and has not been stopped by FortiEDR

C : This is a ransomware attack and has not been stopped by FortiEDR.

D : This is a ransomware attack and has been stopped by FortiEDR

Answer: D

Question 2

Refer to the exhibit, which shows diagnostic output.

A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?

Options :

A : SD-WAN Rule is matching only DNS traffic.

B : Port1 is used because it has more available bandwidth.

C : Traffic is matched by policy route.

D : Route for the destination IP is missing in the routing table.

Answer: C

Question 3

Refer to the exhibit showing an SD-WAN configuration.

According to the exhibit, if an internal user pings 10.1.100.2 and 10.1.100.22 from subnet 172.16.205.0/24, which outgoing interfaces will be used?

Options :

A :

port16 and port1

B : port1 and port1

C : port16 and port15

D : port1 and port15

Answer: A

Question 4

Refer to the exhibit.

You have deployed a security fabric with three FortiGate devices as shown in the exhibit. FGT_2 has the following configuration:

Options :

A : Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate.

B : Objects from the root FortiGate will only be synchronized to FGT__2.

C :

Objects from the root FortiGate will not be synchronized to any downstream FortiGate.

D : Objects from the root FortiGate will only be synchronized to FGT_3.

Answer: A

Question 5

Refer to the exhibit showing FortiGate configurations

FortiManager VM high availability (HA) is not functioning as expected after being added to an existing

deployment.

The administrator finds that VRRP HA mode is selected, but primary and secondary roles are greyed out in the

GUI The managed devices never show online when FMG-B becomes primary, but they will show online

whenever the FMG-A becomes primary.

What change will correct HA functionality in this scenario?

Options :

A : Change the FortiManager IP address on the managed FortiGate to 10.3.106.65.

B : Make the monitored IP to match on both FortiManager devices.

C : Unset the primary and secondary roles in the FortiManager CLI configuration so VRRP will decide who is primary.

D : Change the priority of FMG-A to be numerically lower for higher preference

Answer: B

Smartly Prepare Exam with Free Online NSE8_812 Practice Test

Buying Options: