Free Fortinet NSE8_813 Exam Dumps Questions & Answers

Refer to the exhibit. You have deployed a security fabric with three FortiGate devices as shown in the exhibit.

FGT_2 has the following configuration:

FGT_1 and FGT_3 are configured with the default setting.
Which statement is true for the synchronization of fabric-objects?

• A.Objects from the FortiGate FGT_2 will be synchronized to the upstream FortiGate
• B.Objects from the root FortiGate will only be synchronized to FGT_2
• C.Objects from the root FortiGate will only be synchronized to FGT_3
• D.Objects from the root FortiGate will not be synchronized to any downstream FortiGate

Refer to the exhibit.

An administrator wants to implement a multi-chassis link aggregation (MCLAG) solution using two FortiSwitch 448D devices and one FortiGate 3700D. As described in the network topology shown in the exhibit, two links are already connected from the FortiGate to each FortiSwitch.
What is required to implement this solution? (Choose two.)

• A.An ICL link between both FortiSwitch devices needs to be added.
• B.Replace the FortiGate as this one does not have an ISF.
• C.Create two separate link aggregated (LAG) interfaces on the FortiGate side for each FortiSwitch.
• D.Add set fortilink-split-interface disable on the FortiLink interface.

Which command detects where a routing path is broken?

• A.exec route ping <destination>
• B.diag debug route <destination>
• C.exec traceroute <destination>
• D.diag route null

Review the Application Control log.

Which configuration caused the IPS engine to generate this log?

• A.
• B.
• C.
• D.

Refer to the exhibit. To facilitate a large-scale deployment of SD-WAN/ADVPN with FortiGate devices, you are tasked with configuring the FortiGate devices to support injecting of IKE routes on the ADVPN shortcut tunnels.
Which three commands must be added or changed to the FortiGate spoke config vpn ipsec phase1-interface options referenced in the exhibit for the VPN interface to enable this capability?
(Choose three.)

• A.set mode-cfg enable
• B.set add-route enable
• C.set mode-cfg-allow-client-selector enable
• D.set ike-version 1
• E.set net-device disable