Passing exam with NSE8_813 latest training materials

Which command detects where a routing path is broken?

• A. exec traceroute <destination>
• B. diag debug route <destination>
• C. diag route null
• D. exec route ping <destination>

A customer's cybersecurity department needs to implement security for the traffic between two VPCs in AWS, but these belong to different departments within the company. The company uses a single region for all their VPCs.
Which two actions will achieve this requirement while keeping separate management of each departments VPC? (Choose two.)

• A. Create a transit VPC with a FortiGate HA cluster, connect to the other two using VPC peering, and use routing tables to force traffic through the FortiGate cluster.
• B. Create a VPC with a FortiGate auto-scaling group with a Transit Gateway attached to the three VPC to force routing through the FortiGate cluster.
• C. Migrate all the instances to the same VPC and create IAM accounts for each department, then implement a new subnet for a FortiGate auto-scaling group and use routing tables to force the traffic through the FortiGate cluster.
• D. Create an IAM account for the cybersecurity department to manage both existing VPC, create a FortiGate HA Cluster on each VPC and IPSEC VPN to force traffic between the VPCs through the FortiGate clusters.

Refer to the exhibit.

A customer is trying to setup a Playbook automation using a FortiAnalyzer, FortiWeb and FortiGate. The intention is to have the FortiGate quarantine any source of SQL Injection detected by the FortiWeb.
They got the automation stitch to trigger on the FortiGate when simulating an attack to their website, but the quarantine object was created with the IP 0.0.0.0.
Referring to the configuration and logs in the exhibits, which two statements are true? (Choose two.)

• A. FortiSOC Playbooks combining FortiWeb and FortiGate are not supported.
• B. The FortiAnalyzer ADOM Type must be Fabric.
• C. To diagnose this issue, you need to use the command diagnose test application oftpd 22.
• D. To fix the issue the parameter for script on the Playbook configuration should be epip.
• E. The Group By option in the handler should be different to src, so src can be used on the Playbook configuration.

Refer to the exhibits.
GUI Access

Configuration

Topology

An administrator has configured a FortiGate and FortiAuthenticator for two-factor authentication with FortiToken push notifications for their SSL VPN login. Upon initial review of the setup, the administrator has discovered that the customers can manually type in their two-factor code and authenticate but push notifications.
Based on the information given in the exhibits, what must be done to fix this?

• A. On FG-1 port1, the ftm access protocol must be enabled.
• B. On FAC-1, the FortiToken public IP setting must point to 100.64.1.41.
• C. On FG-1 CLI, the ftm-push server setting must point to 100.64.1.41.
• D. FAC-1 must have an internet routable IP address for push notifications.

Refer to the exhibit.

Given the configuration shown in the exhibit, which two statements are true? (Choose two.)

• A. LAG-1 and LAG-2 should be connected to a 4-port single 802.3ad trunk on another device.
• B. LAG-1 and LAG-2 should be connected to a single 4-port 802.3ad interface on the FortiGate-A.
• C. LAG-3 on switches on FS448D-A and FS448D-B may be connected to a single 802.3ad trunk on another device.
• D. port13 and port14 on FS448D-A should be connected to port13 and port14 on FS448D-B.