Which two statements are correct on a FortiGate using the FortiGuard Outbreak Protection Service (VOS)? (Choose two.)
Answer(s): C,E
C . The antivirus database queries FortiGuard with the hash of a scanned file. This is how the FortiGuard VOS service works. The FortiGate queries FortiGuard with the hash of a scanned file, and FortiGuard returns a list of known malware signatures that match the hash. E . The hash signatures are obtained from the FortiGuard Global Threat Intelligence database. This is where the FortiGuard VOS service gets its hash signatures from. The FortiGuard Global Threat Intelligence database is updated regularly with new malware signatures. https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/889364/fortiguard- outbreak-prevention
A remote worker requests access to an SSH server inside the network. You deployed a ZTNA Rule to their FortiClient. You need to follow the security requirements to inspect this traffic. Which two statements are true regarding the requirements? (Choose two.)
Answer(s): A,C
ZTNA supports SSH connection rules that allow remote workers to access SSH servers inside the network through an HTTPS tunnel between the client and the access proxy (FortiGate). The access proxy acts as an SSH client to connect to the real SSH server on behalf of the user, and performs host- key validation to verify the identity of the server. The user can use any SSH client that supports HTTPS proxy settings, such as PuTTY or OpenSSH.
https://docs.fortinet.com/document/fortigate/7.0.0/ztna-deployment/899992/configuring-ztna- rules-to-control-access https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/29927/ztna-ssh-access- proxy-example
On a FortiGate Configured in Transparent mode, which configuration option allows you to control Multicast traffic passing through the?
Answer(s): A
When multicast-skip-policy is enabled, no check is performed based on multicast policy. A multicast packet received on an interface is flooded unconditionally to all interfaces (except the incoming interface) belonging to the same forwarding domain. Multicast packets are forwarded even when there is no multicast policy or the multicast policy is set to deny. To forward multicast traffic based on multicast policy, multicast-skip-policy must be disabled. In transparent mode, there is a per-VDOM configuration to skip policy check and forward all multicast traffic. This command is only available in transparent mode, and is disabled by default.
Refer to the CLI configuration of an SSL inspection profile from a FortiGate device configured to protect a web server:Based on the information shown, what is the expected behavior when an HTTP/2 request comes in?
Answer(s): B
https://docs.fortinet.com/document/fortigate/7.0.0/new-features/710924/http-2-support-in-proxy- mode-ssl-inspection
Refer to the exhibits.The exhibits show a FortiGate network topology and the output of the status of high availability on the FortiGate.Given this information, which statement is correct?
Answer(s): C
The output of the status of high availability on the FortiGate shows that the cluster mode is active- passive, which means that only one FortiGate unit is active at a time, while the other unit is in standby mode. The active unit handles all traffic and also sends HA heartbeat packets to monitor the standby unit. The standby unit becomes active if it stops receiving heartbeat packets from the active unit, or if it receives a higher priority from another cluster unit. In active-passive mode, all cluster units share a virtual MAC address for each interface, which is used as the source MAC address for all packets forwarded by the cluster.
https://docs.fortinet.com/document/fortigate/6.4.0/cookbook/103439/high-availability-with-two- fortigates
Post your Comments and Discuss Fortinet NSE8_812 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the NSE8_812 content, but please register or login to continue.