NSE 8 - Core Practical Exam Free Sample Questions

You are designing a High Availability (HA) cluster for a financial institution that requires zero packet loss during failover. You decide to implement FortiGate Session Life Support Protocol (FGSP) across two geographically separated data centers. Which of the following requirements must be met to ensure successful Layer 3 session synchronization between the peers?

A network administrator is troubleshooting an SD-WAN deployment where traffic is not switching to the secondary link despite the primary link exceeding the latency threshold. The administrator reviews the SD-WAN rule configuration shown below:

config system sdwan
config service
edit 1
set mode sla
set protocol 6
set start-port 443
set end-port 443
set dst "all"
set src "all"
config sla
edit "latency_check"
set id 1
next
end
set priority-members 1 2
next
end
end

What is the most likely cause of the issue?

You are managing a FortiManager device with ADOMs enabled. You need to upgrade the firmware of a managed FortiGate cluster from v7.2.4 to v7.4.1. When you attempt to perform the upgrade via the FortiManager Device Manager, the option is grayed out. What is the primary reason for this restriction?

In a FortiGate FGCP High Availability cluster, which command would you use to verify if the secondary unit is synchronized with the primary unit's configuration and is ready to take over?

You are configuring a FortiGate in a multi-tenant environment using VDOMs. You need to ensure that a specific customer VDOM (VDOM-A) does not consume more than 20% of the total available sessions on the device. Which configuration context should you use to apply this limit?

An organization uses Auto Discovery VPN (ADVPN) to connect 50 branch offices. A shortcut tunnel has been successfully established between Branch A and Branch B. However, users in Branch A cannot access a specific UDP application in Branch B, although ICMP works fine.

Reviewing the debug flow on Branch A shows:
id=20085 trace_id=1 func=print_pkt_detail line=5824 msg="vd-root:0 received a packet(proto=17, 10.1.1.2:4500->10.2.2.2:4500) from local. type=1, code=0, ...

What is the most likely cause of this issue?