Fortinet NSE8_812 Exam - Topic 1 Question 20 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 20
Topic #: 1

A customer would like to improve the performance of a FortiGate VM running in an Azure D4s_v3 instance, but they already purchased a BYOL VM04 license.

Which two actions will improve performance the most without making a FortiGate license change? (Choose two.)

AMigrate the FortiGate to an Azure F4s_v2.

BEnable 'Accelerated networking' on the Azure network interfaces.

CEnable SR-IOV on the FortiGate.

DMigrate the FortiGate to an Azure D8s_v3.

Show Suggested Answer

Suggested Answer: B, D

Bis correct because the OCSP check of the certificate can be combined with a certificate revocation list (CRL). This means that the FortiGate will check the OCSP server to see if the certificate has been revoked, and it will also check the CRL to see if the certificate has been revoked.

Dis correct because if the OCSP server is unreachable, authentication will succeed if the certificate matches the CA. This is because the FortiGate will fall back to using the CRL if the OCSP server is unreachable.

The other options are incorrect. Option A is incorrect because OCSP checks can go to other OCSP servers, not just the FortiAuthenticator. Option C is incorrect because OCSP certificate responses can be cached by the FortiGate.

References:

Configuring SSL VPN authentication using digital certificates | FortiGate / FortiOS 7.2.0 - Fortinet Document Library

Online Certificate Status Protocol (OCSP) | FortiGate / FortiOS 7.2.0 - Fortinet Document Library

Certificate Revocation Lists (CRLs) | FortiGate / FortiOS 7.2.0 - Fortinet Document Library

by Cherelle at Apr 22, 2024, 05:13 AM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Precious

5 months ago

I disagree, F4s_v2 is better for cost-effectiveness!

upvoted 0 times

...

Alpha

5 months ago

D8s_v3 is overkill for just a performance boost.

upvoted 0 times

...

Rebbecca

6 months ago

Wait, can you really enable SR-IOV on FortiGate?

upvoted 0 times

...

Cheryll

6 months ago

I think migrating to F4s_v2 is a solid choice too.

upvoted 0 times

...

Jeannetta

6 months ago

Definitely go for 'Accelerated networking'!

upvoted 0 times

...

Brett

6 months ago

Migrating to an Azure D8s_v3 seems like a good idea, but it would require a license change, which isn't allowed in this scenario. So, I think we should focus on the other options.

upvoted 0 times

...

Krystina

7 months ago

I feel like SR-IOV might be relevant, but I can't recall if it directly applies to FortiGate VMs. I need to double-check that.

upvoted 0 times

...

Merilyn

7 months ago

I think enabling 'Accelerated networking' could really help with performance. We practiced a similar question where that option made a significant difference.

upvoted 0 times

...

Kenneth

7 months ago

I remember we discussed how Azure instance types can impact performance, but I'm not sure if migrating to a different instance is the best option here since they already have a license.

upvoted 0 times

...

Charlie

7 months ago

This is a good opportunity to demonstrate my understanding of Azure and FortiGate optimization. I'm confident I can identify the two best actions to improve performance.

upvoted 0 times

...

Peggie

7 months ago

I'm a little confused by the SR-IOV option. Does that require any changes to the FortiGate configuration? I'll need to research that one a bit more.

upvoted 0 times

...

Maurine

7 months ago

Okay, I think I've got this. Enabling accelerated networking and migrating to a higher-spec Azure instance should give the biggest performance boost.

upvoted 0 times

...

Desmond

7 months ago

Hmm, I'm a bit unsure about this one. I'll need to carefully read through the options and think about how each one might impact performance.

upvoted 0 times

...

Toshia

7 months ago

This seems like a straightforward performance optimization question. I'll focus on the two actions that can improve performance the most without changing the license.

upvoted 0 times

...

Gracia

7 months ago

The key here is understanding the purpose and usage of the Path-ID. If it's an optional transitive attribute used to advertise multiple paths, then statement B is likely the correct answer.

upvoted 0 times

...

Rutha

7 months ago

I've reviewed the material on QoS devices, and I believe B and E are the true statements about the PE device's functionality.

upvoted 0 times

...

Joesph

7 months ago

Hmm, I'm a bit unsure about this one. The question is asking about what provides the block-level storage, but the answer choices seem to be talking about different file systems. I'll need to think carefully about the relationship between cloud disks and file management systems.

upvoted 0 times

...

Rosendo

7 months ago

This looks like a straightforward BPMN question. I think the answer is Exclusive gateway, since that's used to implement multiple-branch functions where only one branch can be triggered based on the rules.

upvoted 0 times

...

Rozella

7 months ago

I remember practicing a similar question on SRV records, but I can't recall if it's _cisco-uds._tcp or _cisco-uds._tls for Jabber to work properly with Cisco UCM.

upvoted 0 times

...

Vicki

12 months ago

I heard the best way to boost FortiGate performance is to run it on a hamster wheel. Just make sure the hamster has a forklift license.

upvoted 0 times

...

Tresa

12 months ago

Migrate to the F4s_v2? What is this, a performance arms race? I'll stick with the good ol' D4s_v3 and just turn on that accelerated networking. Easy peasy!

upvoted 0 times

Hillary

10 months ago

That should definitely help with performance. No need to change the license.

upvoted 0 times

...

Reita

11 months ago

A) Migrate the FortiGate to an Azure F4s_v2.

upvoted 0 times

...

Devora

11 months ago

B) Enable \'Accelerated networking\' on the Azure network interfaces.

upvoted 0 times

...

Adell

12 months ago

SR-IOV, eh? Isn't that the tech that lets you bypass the hypervisor? Sounds interesting, but I'm not sure the FortiGate supports it. Gotta read the fine print, you know?

upvoted 0 times

...

Wilford

12 months ago

D8s_v3, huh? Sounds like a beefier VM, but I'm not sure it'll make a huge difference. I'd go with the accelerated networking first, see if that does the trick.

upvoted 0 times

...