Question 1

Refer to the exhibit.

A customer wants FortiClient EMS configured to deploy to 1500 endpoints. The deployment will be integrated

with FortiOS and there is an Active Directory server.

Given the configuration shown in the exhibit, which two statements about the installation are correct? (Choose

two.)

Options :

A : If no client update time is specified on EMS, the user will be able to choose the time of installation if they wish to delay.

B : A client can be eligible for multiple enabled configurations on the EMS server, and one will be chosen based on first priority

C : You can only deploy initial installations to Windows clients.

D : You must use Standard or Enterprise SQL Server rather than the included SQL Server Express

E : The Windows clients only require "File and Printer Sharing0 allowed and the rest is handled by Active Directory group policy

Answer: B,C

Question 2

You are troubleshooting a FortiMail Cloud service integrated with Office 365 where outgoing emails are notreaching the recipients' mail What are two possible reasons for this problem? (Choose two.)

Options :

A : The FortiMail access control rule to relay from Office 365 servers FQDN is missing.

B : The FortiMail DKIM key was not set using the Auto Generation option.

C : The FortiMail access control rules to relay from Office 365 servers public IPs are missing.

D : A Mail Flow connector from the Exchange Admin Center has not been set properly to the FortiMail Cloud FQDN.

Answer: C,D

Question 3

A customer's cybersecurity department needs to implement security for the traffic between two VPCs in AWS,

but these belong to different departments within the company. The company uses a single region for all their

VPCs.

Which two actions will achieve this requirement while keeping separate management of each department's

VPC? (Choose two.)

Options :

A : Create a transit VPC with a FortiGate HA cluster, connect to the other two using VPC peering, and use routing tables to force traffic through the FortiGate cluster.

B : Create an 1AM account for the cybersecurity department to manage both existing VPC, create a FortiGate HA Cluster on each VPC and IPSEC VPN to force traffic between the VPCs through the FortiGate clusters

C : Migrate all the instances to the same VPC and create 1AM accounts for each department, then implement a new subnet for a FortiGate auto-scaling group and use routing tables to force the traffic through the FortiGate cluster.

D : Create a VPC with a FortiGate auto-scaling group with a Transit Gateway attached to the three VPC to force routing through the FortiGate cluster

Answer: A,D

Question 4

You must analyze an event that happened at 20:37 UTC. One log relevant to the event is extracted from

FortiGate logs:

The devices and the administrator are all located in different time zones Daylight savings time (DST) is

disabled

• The FortiGate is at GMT-1000.

• The FortiAnalyzer is at GMT-0800

• Your browser local time zone is at GMT-03.00

You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?

Options :

A : 20:37:08

B : 10:37:08

C : 17:37:08

D : 12.37:08

Answer: C

Question 5

Refer to the exhibit.

You need to create a base SD-WAN configuration that includes SD-WAN rules and Performance SLAs for spoke sites with various connectivity types. It needs to be done in a way that can be easily applied to new sites with a minimum amount of change.

How should you create the SD-WAN zones?

Options :

A : With no members configured

B : With members and assign overlay interfaces

C : With members and assign interfaces but do not specify a gateway

D : With members without interface assignments

Answer: B

Confidently Practice Online with Free NSE8_812 Exam Cram

Buying Options: