100% Free Fortinet NSE8_812 Practice Test Questions

Question 1

Refer to the exhibit, which shows diagnostic output.A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?

A : SD-WAN Rule is matching only DNS traffic.

B : Port1 is used because it has more available bandwidth.

C : Traffic is matched by policy route.

D : Route for the destination IP is missing in the routing table.

Answer: C

Question 2

Refer to the exhibit, which shows diagnostic output.A customer reports that ICMP traffic flow from 192.168.1.11 to 93.190.134.171 is not corresponding to the SD-WAN setup. What is the problem in this scenario?

A : SD-WAN Rule is matching only DNS traffic.

B : Port1 is used because it has more available bandwidth.

C : Traffic is matched by policy route.

D : Route for the destination IP is missing in the routing table.

Answer: C

Question 3

Refer to the exhibit.

To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked with

configuring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.

Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phasei-interface

options referenced in the exhibit for the VPN interface to enable this capability? (Choose three.)

A : set net-device disable

B : set mode-cfg enable

C : set ike-version 1

D : set add-route enable

E : set mode-cfg-allow-client-selector enable

Answer: A,D

Question 4

A FortiGate deployment contains the following configuration:

What is the result of this configuration?

A : Route-maps are not configurable in VDOM SERVICES

B : Route-maps for VDOM SERVICES are excluded from HA configuration synchronization

C : Route-maps from VDOM SERVICES are available in all other VDOMs

D : Route-maps from the Root VDOM configuration are available in VDOM SERVICES

Answer: B

Question 5

Refer to the exhibit.

The exhibit shows the forensics analysis of an event detected by the FortiEDR core

In this scenario, which statement is correct regarding the threat?

A : This is an exfiltration attack and has been stopped by FortiEDR.

B : This is an exfiltration attack and has not been stopped by FortiEDR

C : This is a ransomware attack and has not been stopped by FortiEDR.

D : This is a ransomware attack and has been stopped by FortiEDR

Answer: D

Free Practice Fortinet NSE8_812 Exam Questions 2025