Question 1

Refer to the exhibits.

A FortiGate cluster (CL-1) protects a data center hosting multiple web applications. A pair of FortiADC

devices are already configured for SSL decryption (FAD-1), and re-encryption (FAD-2). CL-1 must accept

unencrypted traffic from FAD-1, perform application detection on the plain-text traffic, and forward the

inspected traffic to FAD-2.

The SSL-Offload-App-Detect application list and SSL-Offload protocol options profile are applied to the

firewall policy handling the web application traffic on CL-1.

Given this scenario, which two configuration tasks must the administrator perform on CL-1? (Choose two.)

Options :

A :

B :

C :

D :

Answer: B,C

Question 2

You want to use the MTA adapter feature on FortiSandbox in an HA-Cluster. Which statement about this solution is true?

Options :

A : The configuration of the MTA Adapter Local Interface is different than on port1.

B : The MTA adapter is only available in the primary node.

C : The MTA adapter mode is only detection mode.

D : The configuration is different than on a standalone device.

Answer: B

Question 3

You are troubleshooting a FortiMail Cloud service integrated with Office 365 where outgoing emails are notreaching the recipients' mail What are two possible reasons for this problem? (Choose two.)

Options :

A : The FortiMail access control rule to relay from Office 365 servers FQDN is missing.

B : The FortiMail DKIM key was not set using the Auto Generation option.

C : The FortiMail access control rules to relay from Office 365 servers public IPs are missing.

D : A Mail Flow connector from the Exchange Admin Center has not been set properly to the FortiMail Cloud FQDN.

Answer: C,D

Question 4

A FortiGate deployment contains the following configuration:

What is the result of this configuration?

Options :

A : Route-maps are not configurable in VDOM SERVICES

B : Route-maps for VDOM SERVICES are excluded from HA configuration synchronization

C : Route-maps from VDOM SERVICES are available in all other VDOMs

D : Route-maps from the Root VDOM configuration are available in VDOM SERVICES

Answer: B

Question 5

You must analyze an event that happened at 20:37 UTC. One log relevant to the event is extracted from

FortiGate logs:

The devices and the administrator are all located in different time zones Daylight savings time (DST) is

disabled

• The FortiGate is at GMT-1000.

• The FortiAnalyzer is at GMT-0800

• Your browser local time zone is at GMT-03.00

You want to review this log on FortiAnalyzer GUI, what time should you use as a filter?

Options :

A : 20:37:08

B : 10:37:08

C : 17:37:08

D : 12.37:08

Answer: C

Higher Test Marks with Free Online NSE8_812 Exam Practice

Buying Options: