Fortinet NSE8_812 Exam - Topic 1 Question 22 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 22
Topic #: 1

[All NSE8_812 Questions]

An HA topology is using the following configuration:

Based on this configuration, how long will it take for a failover to be detected by the secondary cluster member?

A600ms

B200ms

C300ms

D100ms

Show Suggested Answer

Suggested Answer: B, D, E

Bmust be set to enable mode-cfg, which is required for injecting IKE routes on the ADVPN shortcut tunnels.

Dmust be set to enable add-route, which is the command that actually injects the IKE routes.

Emust be set to enable mode-cfg-allow-client-selector, which allows custom phase 2 selectors to be configured.

The other options are incorrect. Option A is incorrect because net-device disable is not required for injecting IKE routes on the ADVPN shortcut tunnels. Option C is incorrect because IKE version 1 is not supported for ADVPN.

References:

Phase 2 selectors and ADVPN shortcut tunnels | FortiGate / FortiOS 7.2.0

Configuring SD-WAN/ADVPN with FortiGate | FortiGate / FortiOS 7.2.0

by Laurene at May 13, 2024, 12:55 PM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nakisha

9 months ago

100ms? That’s super optimistic, I doubt it!

upvoted 0 times

...

Mendy

9 months ago

I’m leaning towards 300ms, just feels safer.

upvoted 0 times

...

Marvel

9 months ago

Wait, is it really that fast? Sounds too quick.

upvoted 0 times

...

Louann

10 months ago

Definitely agree, 200ms seems right!

upvoted 0 times

...

Tijuana

10 months ago

I think it's 200ms based on the config.

upvoted 0 times

...

Ranee

10 months ago

I vaguely remember that the default settings often lead to a quicker detection, maybe around 100ms? But I could be mixing it up with another topic.

upvoted 0 times

...

Elke

10 months ago

I feel like 300ms might be the right answer, but I’m a bit confused about how the configuration impacts that timing.

upvoted 0 times

...

Bulah

10 months ago

I think I practiced a similar question where the failover time was around 200ms, but I can't recall if that was for this specific setup.

upvoted 0 times

...

Sharee

11 months ago

I remember studying that failover detection time can vary based on the heartbeat settings, but I’m not sure about the exact timing here.

upvoted 0 times

...

Charlette

11 months ago

This is a tricky one. I'll need to double-check the HA failover timing thresholds to make sure I'm not missing any nuances in the question. Gotta be careful with these configuration-based questions.

upvoted 0 times

...

Venita

11 months ago

Okay, based on the heartbeat interval and failover time settings shown in the diagram, I think the answer is 300ms. The secondary cluster member should detect a failover within that timeframe.

upvoted 0 times

...

Buddy

11 months ago

Hmm, I'm a bit unsure about this one. The configuration diagram is helpful, but I'll need to make sure I understand how the HA failover process works to figure out the right answer.

upvoted 0 times

...

Lawrence

11 months ago

This looks like a straightforward question about HA topology and failover times. I'll need to carefully review the configuration details to determine the correct answer.

upvoted 0 times

...

Twila

11 months ago

I'm not sure about this one. The number of PEs and participating sites is throwing me off. Maybe I should review the VPLS configuration concepts again before answering.

upvoted 0 times

...

Madalyn

11 months ago

Understandability, learnability, and attractiveness are definitely attributes of usability. I'm pretty sure I know the right answer here.

upvoted 0 times

...

Larae

11 months ago

I feel like sulphide stress corrosion cracking could also be a possibility, but since we're dealing with chlorides here, I think it must be option C.

upvoted 0 times

...

Herschel

11 months ago

Okay, let me think this through. Scrum emphasizes short, iterative cycles, so I don't think a fixed amount of months or days would be the best approach. I'm leaning towards B - a fixed amount of weeks, excluding holidays. That seems to align best with Scrum principles.

upvoted 0 times

...

Sabra

1 year ago

A) 600ms? Whoa, that's like a whole lifetime in the tech world! By the time the failover happens, the primary cluster member will have already been on vacation for a week.

upvoted 0 times