Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet NSE8_812 Exam - Topic 1 Question 5 Discussion

A customer is planning on moving their secondary data center to a cloud-based laaS. They want to place all the Oracle-based systems Oracle Cloud, while the other systems will be on Microsoft Azure with ExpressRoute service to their main data center.They have about 200 branches with two internet services as their only WAN connections. As a security consultant you are asked to design an architecture using Fortinet products with security, redundancy and performance as a priority.Which two design options are true based on these requirements? (Choose two.)
B) Use FortiGate VM for IPSEC over ExpressRoute, as traffic is not encrypted by Azure. and D) Two ExpressRoute services to the main data center are required to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge
A) Systems running on Azure will need to go through the main data center to access the services on Oracle Cloud.
C) Branch FortiGate devices must be configured as VPN clients for the branches' internal network to be able to access Oracle services without using public IPs.

Fortinet NSE8_812 Exam - Topic 1 Question 5 Discussion

Actual exam question for Fortinet's NSE8_812 exam
Question #: 5
Topic #: 1
[All NSE8_812 Questions]

A customer is planning on moving their secondary data center to a cloud-based laaS. They want to place all the Oracle-based systems Oracle Cloud, while the other systems will be on Microsoft Azure with ExpressRoute service to their main data center.

They have about 200 branches with two internet services as their only WAN connections. As a security consultant you are asked to design an architecture using Fortinet products with security, redundancy and performance as a priority.

Which two design options are true based on these requirements? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: B, D

To secure the traffic between Azure and the main data center, a FortiGate VM can be deployed in Azure and configured to use IPSEC over ExpressRoute, as traffic is not encrypted by Azure by default. This also allows the use of Fortinet security features such as antivirus, IPS, web filtering, and application control. To implement SD-WAN between Azure and the main data center, two ExpressRoute services are required to provide redundant paths and load balancing. A FortiGate device at the data center edge can be configured to use SD-WAN rules to select the best path based on performance, availability, and cost. Reference: https://docs.fortinet.com/document/fortigate/6.4.0/cookbook/103440/ipsec-vpn-between-fortigate-and-azure https://docs.fortinet.com/document/fortigate/6.4.0/cookbook/103441/sd-wan-between-fortigate-and-azure


by Ryan at Jul 05, 2023, 06:16 PM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Felton
7 months ago
Wait, are they really planning to use two ExpressRoutes? That’s a lot!
upvoted 0 times
...
Macy
7 months ago
D seems a bit excessive, can’t they just use one ExpressRoute?
upvoted 0 times
...
Craig
7 months ago
C sounds right, VPN clients are needed for private access.
upvoted 0 times
...
Jeannetta
7 months ago
B makes sense, IPSEC is a must for security over ExpressRoute.
upvoted 0 times
...
Myrtie
8 months ago
A is definitely true, Azure traffic needs to route through the main center.
upvoted 0 times
...
Alverta
8 months ago
I vaguely recall something about needing multiple ExpressRoute connections for redundancy, but I can't remember if it's specifically for SD-WAN.
upvoted 0 times
...
Samira
8 months ago
I practiced a similar question where branch devices had to connect to cloud services without public IPs, so I feel like option C could be right.
upvoted 0 times
...
Cory
8 months ago
I think using FortiGate VM for IPSEC over ExpressRoute makes sense since Azure traffic isn't encrypted by default, but I need to double-check that.
upvoted 0 times
...
Jaclyn
8 months ago
I remember something about how Azure traffic might need to route through the main data center, but I'm not sure if that's always the case.
upvoted 0 times
...
Evette
8 months ago
Okay, I've got this. Residual income is the performance measure that includes both profits and the investment base. It's calculated by taking the operating income and subtracting a charge for the capital employed. That's the one that fits the description in the question.
upvoted 0 times
...
Leota
9 months ago
I'm a little confused by the wording of the question. Is the user trying to limit the list of values for all five Operating Units, or just the three they transact in regularly? That's an important detail that could affect the answer.
upvoted 0 times
...
Amalia
9 months ago
I remember discussing copyright law and how it protects original works. This feels like a copyright violation since the poems were published without permission.
upvoted 0 times
...

Save Cancel