Logo ExamsQA
Exit
Official Bank 0/105

Fortinet NSE 8 – Written (NSE8_812) - Fortinet Exam Questions

Last updated on June 20, 2026

97% Exam Compliance
105 Total Questions
1
Question
Refer to the exhibit.

Exhibit

A customer is trying to setup a Playbook automation using a FortiAnalyzer, FortiWeb and FortiGate. The intention is to have the FortiGate quarantine any source of SQL Injection detected by the FortiWeb. They got the automation stitch to trigger on the FortiGate when simulating an attack to their website, but the quarantine object was created with the IP 0.0.0.0. Referring to the configuration and logs in the exhibits, which two statements are true? (Choose two.)
Select 2
Options
A To fix the issue the parameter for script on the Playbook configuration should be epip.
B FortiSOC Playbooks combining FortiWeb and FortiGate are not supported.
C The Group By option in the handler should be different to src, so src can be used on the Playbook configuration.
D To diagnose this issue, you need to use the command diagnose test application oftpd 22.
E The FortiAnalyzer ADOM Type must be Fabric.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

2
Question
Refer to the exhibits.

Exhibit

You must integrate a FortiMail and FortiSandbox Enhanced Cloud solution for a customer who is concerned about the e-mails being delayed for too long. According to the configuration shown in the exhibits, which would be an expected behavior?
Options
A FortiMail will relay valid e-mails to the mail server as soon as it is done with other local inspections.
B If an attachment is sent to the FortiSandbox while the job queue is full, the e-mail might be
delayed for up to 30 minutes, then e-mail will be relayed to the mail server.
C FortiMail will not wait for results but only for attachments that have been already submitted to the FortiSandbox in the last 60 minutes.
D FortiMail will ignore the timeout value if content disarm and reconstruction (CDR) is enabled.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

3
Question
Refer to the exhibit, which shows the high availability configuration for the FortiAuthenticator (FAC1). Based on this information, which statement is true about the next FortiAuthenticator (FAC2) member that will join an HA cluster with this FortiAuthenticator (FAC1)?
Options
A FAC2 can have its HA interface on a different network than FAC1.
B FAC2 can only process requests when FAC1 fails.
C The FortiToken license will need to be installed on the FAC2.
D FSSO sessions from FAC1 will be synchronized to FAC2.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

4
Question
What is the benefit of using FortiGate NAC LAN Segments?
Options
A It provides physical isolation without changing the IP address of hosts.
B It provides support for multiple DHCP servers within the same VLAN.
C It provides support for IGMP snooping between hosts within the same VLAN
D It allows for assignment of dynamic address objects matching NAC policy.
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

5
Question
A retail customer with a FortiADC HA cluster load balancing five webservers in L7 Full NAT mode is receiving reports of users not able to access their website during a sale event. But for clients that were able to connect, the website works fine. CPU usage on the FortiADC and the web servers is low, application and database servers are still able
to handle more traffic, and the bandwidth utilization is under 30%.

Which two options can resolve this situation? (Choose two.)
Select 2
Options
A Change the persistence rule to LB_PERSIS_SSL_SESSJD.
B Add more web servers to the real server poof
C Disable SSL between the FortiADC and the web servers
D Add a connection-pool to the FortiADC virtual server
Discussion (0 comments)

to join the discussion

Community Discussion

No discussions yet. Be the first to ask!

Finish Practice?

Are you sure you want to finish? This will end your practice session.