NSE8 Sample Questions & Answers

An organization uses FortiClient EMS to manage endpoints and enforce compliance. The security team wants to implement a Zero Trust Network Access (ZTNA) policy where only endpoints with an active FortiClient, a specific software version installed, and a high security posture tag can access internal applications. Which component is responsible for collecting the endpoint posture information and assigning the relevant ZTNA tags?

A large enterprise has deployed FortiGate 7000 series chassis in their data centers. A network architect needs to explain the data path for traffic that can be fully offloaded by the NP7 processors. Which option correctly describes the 'fast path' for a TCP session through the chassis?

An engineer is using the FortiGate REST API to automate the creation of firewall address objects. The following Python code snippet is used to send the request. Assuming the API key and FortiGate IP are correct, what must be added to the request headers for it to be accepted by the FortiGate?

import requests

api_key = 'your_api_key'
fg_ip = '10.0.1.1'

headers = {
'Authorization': f'Bearer {api_key}',
# Missing header here
}

url = f'https://{fg_ip}/api/v2/cmdb/firewall/address'

response = requests.post(url, headers=headers, verify=False)

A global enterprise has a complex hub-and-spoke ADVPN deployment. They are experiencing issues where spoke-to-spoke shortcut tunnels are not forming for VoIP traffic, causing calls to hairpin through the hub and increasing latency. The IPsec, BGP, and underlying network connectivity have been verified as correct. What is a common ADVPN-specific reason for this behavior?

A consultant is reviewing an SD-WAN deployment where application performance is poor despite having two high-quality internet links. The configuration uses a performance SLA with latency, jitter, and packet loss thresholds. The SD-WAN rule is set to 'Best Quality'. The consultant observes from the performance SLA logs that both links are consistently marked as 'dead' (red), even though manual ping tests show low latency and no loss. What is the most likely configuration error?

A company is implementing a multi-VDOM architecture on a single FortiGate. The goal is to have a dedicated VDOM for managing internet-facing services (INET-VDOM) and another for internal corporate services (CORP-VDOM). An inter-VDOM link connects them. An administrator in CORP-VDOM needs to access a server in INET-VDOM. Which two components are essential for enabling this traffic flow? (Select TWO).

During a security audit, it was discovered that an automated script is adding hundreds of temporary IP addresses to a dynamic firewall address group via the API. This is causing high CPU utilization on the FortiGate. The security architect decides to implement a solution using the FortiManager CLI to prevent this. Which FortiManager feature allows an administrator to define a script that runs automatically when configuration changes are imported from a device, which can be used to validate and reject the unwanted changes?

A hospital needs to provide secure remote access for doctors to access patient records. The solution must use multi-factor authentication and ensure that only devices compliant with the hospital's security policy can connect. The current infrastructure includes FortiGate, FortiAuthenticator, and FortiClient EMS. Which of the following represents the most secure and integrated solution to meet all requirements?

An administrator is troubleshooting a FortiMail device operating in Transparent Mode. Email delivery is failing, and a packet capture shows that the FortiGate in front of the FortiMail is dropping the SMTP packets. What is the most likely reason for this behavior?

A FortiGate is configured with two SD-WAN members: Port1 (cost 10) and Port2 (cost 20). An SD-WAN rule is configured with the 'Lowest Cost (SLA)' strategy to prefer Port1. However, administrators notice traffic is still being sent out Port2. The performance SLA shows Port1 is alive and meeting all thresholds. Which of the following is the most plausible explanation for this behavior?