Fortinet NSE 6 - FortiWeb 6.1
Exam series: NSE6_FWB-6.1
Number of questions: 30
Exam time: 60 minutes
Language: English and Japanese
Product version: FortiWeb 6.1
Status: Available
Description The Network Security Specialist designation recognizes your comprehensive
skills and ability to work with the Secure Fabric products that go beyond the
firewall.
Who Should Attempt the NSE 6 Certification We recommend this course for network and security professionals who are
involved in managing and supporting specific Fortinet security products.
Program Requirements You must successfully pass a minimum of any four Fortinet NSE 6
certification exams. You can earn a specialist designation by successfully
passing each product-specific exam.
To prepare for the certification exams, we recommend that you take the NSE 6
product courses. The courses are optional.
About NSE Certification Exams Available worldwide at: Pearson VUE testcenter
Scoring method: Answers must be 100% correct for credit. No partial credit is
given. There are no deductions for incorrect answers.
Type of questions: Multiple choice and multiple select
Time required between attempts: 15 days
Transcript and certificate: Your Fortinet NSE Institute transcript is updated
within five business days after you pass the exam. After that, you will be able
to download a printable certificate from the NSE Institute.
QUESTION 1
Which two statements about running a vulnerability scan are true? (Choose two.)
A. You should run the vulnerability scan during a maintenance window.
B. You should run the vulnerability scan in a test environment.
C. Vulnerability scanning increases the load on FortiWeb, so it should be
avoided.
D. You should run the vulnerability scan on a live website to get accurate
results.
Correct Answer: AB
QUESTION 2 FortiWeb offers the same load balancing algorithms as FortiGate.
Which two Layer 7 switch methods does FortiWeb also offer? (Choose two.)
A. Round robin
B. HTTP session-based round robin
C. HTTP user-based round robin
D. HTTP content routes
Correct Answer: AD
QUESTION 3 Which would be a reason to implement HTTP rewriting?
A. The original page has moved to a new URL
B. To replace a vulnerable function in the requested URL
C. To send the request to secure channel
D. The original page has moved to a new IP address
Exam AZ-120: Planning and Administering Microsoft Azure for SAP
Workloads
Languages: English, Japanese, Chinese (Simplified), Korean, French, German,
Spanish, Portuguese (Brazil), Russian, Arabic (Saudi Arabia), Chinese
(Traditional), Italian
Retirement date: none
This exam measures your ability to accomplish the following technical tasks:
Migrate SAP Workloads to Azure; Design and Implement an Infrastructure to
Support SAP Workloads; Design and Implement High Availability and Disaster
Recovery; and Maintain SAP Workloads on Azure.
Skills measured The content of this exam was updated on May 28, 2021. Please download the
exam skills outline below to see what changed.
Migrate SAP Workloads to Azure (25–30%)
Design and Implement an Infrastructure to Support SAP Workloads (25–30%)
Design and Implement High Availability and Disaster Recovery (HA/DR) (20–25%)
Maintain SAP Workloads on Azure (15–20%)
The following exam guide shows the changes that were
implemented on May 28, 2021.
Audience Profile
Candidates for this exam should be architects or engineers with extensive
experience and knowledge of the SAP system landscape and industry standards that
are specific to the initial migration or integration and
the long-term operation of an SAP solution on Microsoft Azure.
Responsibilities for an architect or an engineer for Azure for SAP Workloads
include making recommendations on services and adjusting resources as
appropriate for optimal resiliency, performance, scale, provision, size, and
monitoring.
Architects or engineers for Azure for SAP Workloads partner with cloud
administrators, cloud DBAs, and clients to implement solutions.
A candidate for this exam should have extensive experience and knowledge of SAP
applications:
SAP HANA, S/4HANA, SAP NetWeaver, SAP BW/4HANA, OS servers for SAP applications
and databases, Azure portal, Azure Marketplace,
Azure Resource Manager templates (ARM templates),
operating systems, virtualization, cloud infrastructure, storage
structures, high availability design, disaster recovery design, data protection
concepts, and networking. For this exam, we strongly recommend that you have an
Azure Administrator Associate or Azure
Solutions Architect Expert certification, in addition to SAP HANA and Linux certifications.
Skills Measured NOTE: The bullets that follow each of the skills measured are intended to
illustrate how we are assessing that skill. This list is NOT definitive or
exhaustive.
NOTE: Most questions cover features that are General Availability (GA). The exam
may contain questions on Preview features if those features are commonly used.
Migrate SAP Workloads to Azure (25–3010-15%) Create an inventory of existing SAP
landscapes
network inventory
security inventory
computing inventory
operations system inventory
resiliency and availability inventory
SAP Database Inventory
SAP Landscape architecture
SAP workload performance SLA and metrics
migration considerations
Identify requirements for target infrastructure estimate target database size
determine supportability of operating systems and databases in Azure
estimate compute, storage, and network requirements for the target database
determine target SAPS by using Early Watch Alert (EWA) reports or Quick Sizer
assess constraints imposed by subscription models and quota limits
recommend licensing and pricing across SAP tiers
recommend components, such as Azure Data Factory, Data Lake, Microsoft Power
BI, and SAP Cloud
specify a Microsoft support option for SAP on Azure
Design and implement identity and access for SAP
workloads design a migration strategy
certified and support SAP HANA hardware directory
design criteria for Tailored Datacenter Integration (TDI) solutions
databox
HANA System Replication (HSR)
Azure Migrate SAP
backup and restore methods and solutions
infrastructure optimization for migration design and implement access control and authorization
for SAP workloads
design and implement authentication for SAP workloads
manage access permissions to SAP systems
design and implement an SAP migration strategy
choose a migration scenario (lift-and-shift, lift-shift-migrate,
lift-shift-migrate to HANA) or green field
choose migration methods
configure storage to support migration
implement an SAP migration
Design an Azure Solutionand Implement an Infrastructure
to Support SAP Workloads (25–30 20-25%)
Design a core infrastructure solution in Azure
to support SAP workloadsDesign and implement a compute solution
for SAP workloads network topology requirements
security requirements
virtual or bare metal
compute
operating system requirements
supported SAP products/versions
storage requirements
proximity placement group
infrastructure requirements
design Azure infrastructure services to support SAP workloads
specify a compute platform (Azure Virtual Machines versus HANA Large Instances
[HLIs])
configure Enhanced Monitoring
configure Accelerated Networking
configure VMs for Availability Sets
configure VMs for Availability Zones
deploy an OS by using the Azure Marketplace
create and deploy a custom image
automate deployment by using ARM templates
connect to an Azure HLI
configure license registration for an Azure HLI
configure and apply operating system updates to an Azure HLI
configure a snapshot
Design and implement a network topology for SAP on
Azure Virtual Machines or Azure HLI backup and restoration requirements
SLA/High Availability
data protection (LRS/GRS, Availability Zones)
compliance
monitoring
licensing
application interfaces
dependencies
design and configure proximity placement groups
define SAP zones and subnets
design for latency considerations
design for network security
design and implement networking for Azure HLI
plan for the use of Azure Express Route (FastPath versus direct)
optimize networking to minimize latency between/within SAP tiers
configure routing for Azure HLI
design and configure load balancing for a reverse proxy
Design and implement a storage solution for SAP on Azure Virtual Machine or
Azure HLI
specify an appropriate disk option (Managed, Premium, Ultra disk, SOFS with
Storage
Spaces Direct [SSD], Azure NetApp Files, Azure Shared Managed Disks)
specify when to use disk striping
design for security considerations for storage
design for data protection considerations
design and implement caching for disks
configure Write Accelerator
configure encryption
Design and Implement High Availability and Disaster Recovery (HA/DR) (20–25%) Design a resilient Azure solution to support SAP workloads
Design a high availability and disaster recovery solution for SAP on Azure
Virtual Machine or Azure HLI HA/DR models supported in HANA (N+N, N+M)
application servers (NetWeaver and XS Advanced)
SAP Central services
availability sets
availability zones
Disaster Recovery (DR) with paired regions
database HA
design an Azure Site Recovery strategy for SAP workloads
design HANA system replication/SQL Server Always On/Data Guard
design an availability set and availability zone strategy for SAP workloads
design load balancing for SAP HA or database HA
design for regional considerations
design for service-level agreement (SLA) considerations
Implement high availability and disaster recovery configure STONITH
configure database-level replication, including HANA System Replication, SQL
Server Always On, and Oracle Data Guard
configure fencing/Stonith Block Device (SBD)
configure Azure Site Recovery
configure storage-level replication for SAP Central Services
configure load balancing for SAP HA or database HA
configure clustering
configure and validate backups
perform backup and restore
test disaster recovery
Maintain SAP Workloads on AzureBuild and Deploy Azure for SAP
Workloads (15–20%) Automate deployment of Virtual Machines (VMs)
azure Resource Manager (ARM) templates
automated configuration of VM
scripting with automation tools, including script development, script
modification, and deployment dependencies
Implement and manage virtual networking
IDS/IPS for Azure
routing fundamentals
subnetting strategy
isolation and segmentation for SAP landscape
Manage access and authentication on Azure
custom domains
Azure AD Identity Protection
Azure AD join
conditional access policies
role-based access control (RBAC)
service principal
just in time access
Implement and manage identities Azure AD Connect
AD Federation and single sign-on
LDAP/Kerberos/SSH
Linux VMs Active Directory domain membership mechanism
SAP HANA Cloud Platform Identity Authentication (integration with Azure AD)
Optimize performance and costs test performance and health of SAP workloads on Azure by using
ABAPmeter
storage structure
SAP workloads on Azure support pre-requisites
scheduled maintenance for planned outages
recovery plan for unplanned outages
SAP application and infrastructure housekeeping (i.e. snapshots on OS volumes)
bandwidth adjustment for ExpressRoute
IPtables ExpressRoute Fast Path and ExpressRoute GlobalReach for HANA Large
Instances (HLI) optimize performance and cost of SAP HANA virtual hardware and Azure HLIs
optimize performance and cost of SAP HANA Hardware and Cloud Measurement Tools
(HCMT)
measure/reduce network latency between SAP servers and clients
optimize network performance and bandwidth costs
optimize performance and cost of SAP application servers
optimize performance by using the SAPS benchmark tool
configure snoozing
resize VMs
optimize storage costs
optimize an SAP workload on Azure by using Azure Advisor
Monitor SAPworkloads on
Azure Azure Extension for SAP
Azure Monitor
log Analytics workspaces & metrics monitor SAP workloads by using Azure Monitor for SAP Solutions
monitor SAP workloads by using Log Analytics
monitor networking
Build & Deploy HA/DR infrastructure for SAP products ASCS/SCS deployments on Linux & Windows (SOFS with S2D, Azure NetApp
Files, 3rd
party products that emulate shared storage)
HA/DR scenarios for SAP HANA
HA/DR scenarios for AnyDB
HA for non-NetWeaver Products like SAP Business One, SAP Business Object BI
where to use load balances & troubleshooting connectivity
Validate Azure Infrastructure for
SAP Workloads (10-15%) Perform infrastructure validation check Apache JMeter, Spirent Avalanche, Microfocus LoadRunner
test implementation for SAP workloads
verify network performance and throughput
verify storage
SAP HANA Hardware and Cloud Measurement Tools (HCMT) (HANA)
flexible I/O tester (FIO) and DD
Perform operational readiness check backup and restore
High Availability checks
failover test
DR test
print test
Operationalize Azure SAP Architecture (10-15%) Optimize performance test performance and health of SAP workloads on Azure by using
ABAPmeter
storage structure
SAP workloads on Azure support pre-requisites
scheduled maintenance for planned outages
recovery plan for unplanned outages
SAP application and infrastructure housekeeping (i.e. snapshots on OS volumes)
bandwidth adjustment for ExpressRoute
IPtables ExpressRoute Fast Path and ExpressRoute GlobalReach for HANA Large
Instances (HLI)
Migrate SAP workloads to Azure migration strategy
Azure Migrate
private and public IP addresses, network routes, network interface, subnets,
and virtual network
storage configuration
source and target environments preparation
backup and restore of data
SQL Server Migration Assistant (SSMA) (migration from DB2, Oracle, SAP ASE, to
SQL Server in an Azure VM)
QUESTION 1 You are evaluating which migration method Litware can implement based on the
current environment and the business goals.
Which migration method will cause the least amount of downtime?
A. Migrate SAP ECC to SAP Business Suite in HANA, and then migrate SAP to Azure.
B. Use Near-Zero Downtime (NZDT) to migrate to SAP HANA and Azure during the
same maintenance window.
C. Use the Database Migration Option (DMO) to migrate to SAP HANA and Azure
during the same maintenance window.
D. Migrate SAP to Azure, and then migrate SAP ECC to SAP Business Suite on HANA.
Correct Answer: C
QUESTION 2 You have an SAP environment on Azure that uses multiple subscriptions.
To meet GDPR requirements, you need to ensure that virtual machines are deployed
only to the West Europe and North Europe Azure regions.
Which Azure components should you use?
A. Azure resource locks and the Compliance admin center
B. Azure resource groups and role-based access control (RBAC)
C. Azure management groups and Azure Policy
D. Azure Security Center and Azure Active Directory (Azure AD) groups
Correct Answer: C
QUESTION 3 You deploy an SAP environment on Azure.
Your company has a Service Level Agreement (SLA) of 99.99% for SAP.
You implement Azure Availability Zones that have the following components:
Redundant SAP application servers
ASCS/ERS instances that use a failover cluster
Database high availability that has a primary instance and a secondary instance
You need to validate the high availability configuration of the ASCS/ERS
cluster.
What should you use?
A. SAP Web Dispatcher
B. Azure Traffic Manager
C. SAPControl
D. SAP Solution Manager
Correct Answer: B
QUESTION 4 You plan to deploy an SAP environment on Azure.
You plan to store all SAP connection strings securely in Azure Key Vault without
storing credentials on the
Azure virtual machines that host SAP.
What should you configure to allow the virtual machines to access the key vault?
A. Azure Active Directory (Azure AD) Privilege Identity Manager (PIM)
B. role-based access control (RBAC)
C. a Managed Service Identity (MSI)
D. the Custom Script Extension
Correct Answer: C
QUESTION 5 You plan to deploy SAP application servers that run Windows Server 2016.
You need to use PowerShell Desired State Configuration (DSC) to configure the
SAP application server once
the servers are deployed.
Which Azure virtual machine extension should you install on the servers?
A. the Azure DSC VM Extension
B. the Azure virtual machine extension
C. the Azure Chef extension
D. the Azure Enhanced Monitoring Extension for SAP
You have proven skills in performing ONTAP® installation services, adhering to
NetApp® quality standards, and using NetApp best practices.
NCSIE ONTAP logos and certificates will be granted to those individuals who
successfully pass the NetApp Certified Storage Installation Engineer, ONTAP
(NS0-183) exam.
Candidates for the NetApp Certified Storage Installation Engineer, ONTAP
certification should have at least 6 to 12 months of experience with NetApp®
ONTAP® solutions, including setting up, configuring, installing, testing, and
troubleshooting NetApp storage systems.
It is recommended (but not required) that NCSIE candidates first achieve the
NetApp Certified Data Administrator (NCDA) certification.
Recommended Training and Resources: ONTAP Clustered Installation Workshop (ILT)
ONTAP Cluster Administration (vILT/ILT)
Universal FAS Installation (WBT)
Introduction to NetApp Installation Standard (WBT)
Practice Test for NS0-183
View Exam Topics
Reference Document (PDF)
Register for NS0-183
To enroll in NetApp University training, you will need a NetApp Support Site
account.
Take your exam The NetApp Certified Storage Installation Engineer, ONTAP exam includes 60
test questions, with an allotted time of 1-1/2 hours to complete. In countries
where English is not the native language, candidates for whom English is not
their first language will be granted a 30-minute extension to the allotted
examination completion time.
Your results will be available in CertCenter two (2) to five (5) business days
after you complete your exam.
The NCSIE ONTAP (NS0-183) exam includes the following topics:
Basic Installation Topics and Tools
Describe installation preparation steps
Describe basic equipment installation steps
ONTAP Concepts
Identify general cluster terms used during installation
Identify ONTAP licensing for 9.7
ONTAP Networking
Describe the cluster network, e.g., multi-node, single node clusters
Demonstrate knowledge of the purpose of the management network
Identify the networking components in a cluster environment
ONTAP Switches
Identify the functions of supported switches
Demonstrate knowledge of how to configure/verify configuration requirements
ONTAP Configuration
Describe how to use NetApp configurations
Demonstrate knowledge of how a node should be added or replaced
Customer Handoff
Describe how to complete the service report
Demonstrate knowledge of handoff procedures to the customer
Demonstrate knowledge of how to communicate completion and possible problem
status
Identify contacts for additional help after handoff
QUESTION 1
What should you do to change the data protocol of a LIF?
A. Delete and re-recreate the LIF.
B. Add the new data protocol to the LIF.
C. Put the LIF in another broadcast domain.
D. Shut down the assigned port.
Correct Answer: A
QUESTION 2 You are preparing for the installation of a new 2-node cluster with ONTAP
9.7 using NL-SAS drives.
Your customer wants to use the cluster exclusively with FlexGroups.
In this scenario, which two statements are correct? (Choose two.)
A. All NL-SAS drives are assigned only to one of the nodes.
B. A NAS protocol is licensed on both nodes.
C. A SAN protocol is licensed on both nodes.
D. All NL-SAS drives are divided evenly across both nodes.
Correct Answer: B,D
QUESTION 3 You are a NetApp Professional Services engineer, employed by NetApp. You
have just completed an ONTAP
cluster installation. You need to collect the relevant configuration information
to enable the Service Event Report (SER) to be created.
Which tool would you use to accomplish this task?
A. Active IQ scheduled reports
B. NetAppDocs output report
C. ONTAP System Manager
D. Active IQ Config Advisor worksheet
Correct Answer: A
QUESTION 4 What is the default shelf ID for disk shelves with IOM12 modules?
NetApp Certified Hybrid Cloud Implementation Engineer NetApp Certified Hybrid Cloud Implementation Engineers have the skills
and ability to implement and automate NetApp Hybrid Cloud solutions from private
and public cloud configurations to monitoring and troubleshooting.
NCHC Implementation Engineer logos and certificates will be granted to those
individuals who successfully pass the NetApp Certified Hybrid Cloud
Implementation Engineer (NS0-402) exam.
Prepare for your exam Candidates for NetApp Certified Hybrid Cloud Implementation Engineer
certification should have at least 6-12 months of field experience.
Recommended Preparation NS0-402 Practice Test
Reference Document
Azure Fundamentals
Cloud Volumes ONTAP Deployment and Management for Azure
AWS Fundamentals
Cloud Volumes ONTAP Deployment and Management for AWS
GCP Fundamentals
NetApp HCI Installation & Configuration
Integrating Hybrid Clouds with NetApp Data Fabric
Using Cloud Insights
Docker for Beginners
Fundamentals of Containers, Kubernetes, and Red Hat OpenShift
DevOps Materials
Additional Links: Git Theory
Git Practice
Ansible Resources: Get Started; User Guide; netapp.io
Take your exam
The NetApp Certified Hybrid Cloud Implementation Engineer exam (NS0-402)
includes 60 test questions, with an allotted time of 1-1/2 hours to complete. In
countries where English is not the native language, candidates for whom English
is not their first language will be granted a 30-minute extension to the
allotted examination completion time.
Your results will be available in CertCenter two (2) to five (5) business days
after you complete your exam.
The NS0-402 Exam Includes the Following Topics:
DevOps Concepts
Describe version control processes for code
Describe the differences in DevOps versus traditional system administration
Describe NetApp Hybrid Cloud capabilities within the software development
lifecycle
Scalable Hybrid Cloud Deployment Demonstrate knowledge of security or compliance deployment capabilities
in a NetApp Hybrid Cloud
Demonstrate knowledge of high availability or fault tolerance capabilities in
the NetApp Hybrid Cloud
Demonstrate knowledge of end-to-end deployment of hybrid cloud solutions
Demonstrate knowledge of deploying a NetApp private cloud
Hybrid Cloud Infrastructure Automation
Describe the types of automation methods
Demonstrate knowledge of using configuration files
Demonstrate knowledge of how to use Ansible for NetApp deployment
Persistent Storage for Containers Demonstrate knowledge of when to use persistent storage with containers
Describe how to implement automated persistent storage using Trident
Hybrid Cloud Infrastructure Monitoring and Remediation Demonstrate knowledge of how to monitor hybrid cloud solutions
Demonstrate knowledge of hybrid cloud problem remediation
QUESTION 1 You want to integrate data cloning with the rest of the infrastructure
deployment to create a test environment.
In this scenario, which automation mechanism would be incorporated for your
cloud-based testing?
A. Ansible playbook using REST API calls for different tasks
B. Ansible playbook using ZAPI calls for different tasks
C. cloning the environment from within System Manager
D. SOAP calls from a client tool
Correct Answer: A
QUESTION 2 You have deployed your application to an NKS cluster in your
on-premises environment with ONTAP Select.
You now want to move your application to an AWS environment.
What are two ways to accomplish this task? (Choose two.)
A. Use CloudMirror.
B. Use Cloud Sync.
C. Use SnapSync.
D. Use SnapMirror.
Correct Answer: B,D
QUESTION 3 Your company asks you to deploy a new version control management
system.
In this scenario, which two tools would accomplish this task? (Choose two.)
A. Confluence
B. GitHub
C. ALM
D. SourceForge
Correct Answer: A,B
QUESTION 4 A customer has a legal requirement to hold data that has a 30-year
retention period. The data cannot be
modified when it is under hold. If the legal hold for any of the data ends, that
data must be removed.
In this scenario, what are two solutions that satisfy the customer’s
requirements? (Choose two.)
A. SnapLock Compliance enabled aggregate
B. SnapLock Enterprise enabled aggregate
C. Cloud Volumes ONTAP in GovCloud
D. NetApp Cloud Volumes ONTAP with WORM enabled
QUESTION 1
The project manager needs assistance from the BPM analyst in building a process
roadmap. What tool should
the BPM analyst use to create a detailed list of areas of opportunity?
A. A Prioritization Matrix
B. A Root Cause Analysis Matrix
C. A Business Value Add Analysis Matrix
D. A Failures Mode Effect Analysis (FMEA) Matrix
Answer: A
QUESTION 2
A cable company is improving a process in their call center for requesting cable
service. The new process will
run in IBM Business Process Manager V7.5.1. The call center supervisor would
like to know how long it takes
the customer service representatives to take the customer requests before
passing the request to the engineering
department to provide the service. What should the BPM analyst recommend to
address the measurement
reporting requirement?
A. Use the My Performance scoreboard with Provide Cable Service filter.
B. Use the My Team Performance scoreboard with the Take customer service
request.
C. Use IBM Business Monitor to create a custom report with events from the
engineering department database.
D. Create a custom report with tracking points in the process with cable service
customer names.
Answer: B
QUESTION 3
A BPM analyst is documenting process problems during a discovery session. As a
problem is raised, what are
the two key factors the BPM analyst needs to capture about each problem to be
able to prioritize them later?
A. Time and effort to fix the problem for the as-is and to-be processes.
B. When the problem first occurs and how often it occurs in each milestone.
C. Severity and frequency of the problem at the process, milestone, or activity
level.
D. Who is the participant when the problem occurs and what other tasks does that
participant complete.
Answer: C
QUESTION 4
A project manager asks a BPM analyst to assist with defining a business case for
a company based on their
goals and objectives. What are key components to include in
support of a business case?
A. 1. Establish critical success factors
2. Identify KPIs
3. Identify business pain points
4. Calculate Return on Investment
B. 1. Establish critical success factors
2. Complete Playback 1 retrospective notes
3. Develop coaches from the future process
4. Calculate Return on Investment
C. 1. Identify system integrations
2. Run Process Optimizer Reports
3. Identify business pain points
4. Calculate user story points
D. 1. Complete Playback 1 retrospective notes
2. Identify KPIs
3. Develop coaches from the future process
4. Calculate user story points
Answer: A
QUESTION 5
A BPM analyst is performing a process inventory analysis at a company that has
many processes and has
gathered all required information to calculate a priority value for each process
in order to rank them.
How should the BPM analyst compute this?
A. Provide a scale and weight for each activity in the process.
B. Provide a scale for each process category and weigh the categories against
the processes.
C. Have the customer and the BPM analyst provide 2 different priority values
independently and calculate 1 priority value.
D. Count the number of activities in diagram and evaluate the complexity of the
diagram to provide a value and calculate a priority value.
Description The NSE 8 Fortinet Network Security Expert designation recognizes your
comprehensive knowledge of network security design, configuration, and
troubleshooting for complex networks. To attempt the exam, you must have
industry experience.
Who Should Attempt the NSE 8 Certification
We recommend this course for networking and security experts who use Fortinet
solutions. In addition to formal training, you should have experience with a
variety of complex networks, and can solve complicated security problems.
Program Requirements There are no prerequisites to take the Fortinet NSE 8 written exam. However,
you must take the NSE 8 written exam before you can take the Fortinet NSE 8
practical exam. The written exam is not a certification by itself. You must pass
both the written exam and practical exam to obtain NSE 8 certification.
To prepare for the exams, we recommend that you take the NSE 4 to NSE 7 training
courses and have comprehensive experience using Fortinet producsts in a
production environment. The courses are optional.
About the NSE 8 Written Exam The written exam is available worldwide, through Pearson VUE test center.
After you successfully pass the written exam, you must purchase your seat to
schedule the practical exam. Contact your regional Fortinet Training coordinator
to schedule and coordinate the NSE 8 practical. Practical exams are available
onsite at designated Fortinet NSE 8 test location.
The written exam contains questions about design scenarios with exhibits,
configuration extracts, and troubleshooting scenarios that assess your security
networking and Fortinet solution knowledge and experience. You are not allowed
to bring reference materials in to the exam room.
Name: NSE 8 - Network Security Expert 8 Written Exam (NSE8_811).
Available worldwide at: Pearson VUE Test Centers
Number of questions: 60
Time allowed to complete: 120 minutes
Scoring method: Answers must be 100% correct for credit. There are no partial
credit given or deductions for incorrect answers. You will receive a document
containing a general pass or fail result, and indication as to which sections
you passed or failed.
Type of questions: Multiple choice and multiple select
Time required between attempts: 15 days
NSE 8 Description The Fortinet Network Security Expert - NSE 8 certification is the highest
and most prestigious level in the Fortinet technical certification ladder. It
signifies a complete and thorough understanding of all Fortinet appliances,
including implementation, operation, advanced features and troubleshooting. The
Fortinet NSE 8 certification is designed to reflect best practices using
Fortinet devices and advanced networking and security solutions.
For any company running Fortinet security, the value of having an NSE 8
Certified Engineer onboard cannot be overstated. It increases any company’s
self-sufficiency and strengthens in the marketplace. Having a Fortinet NSE 8
certification in today’s IT market is invaluable when looking for employment.
Being a part of the very small Fortinet elite will make you an irresistible
asset to any company using Fortinet products. The reason for all the exclusivity
surrounding the NSE 8 certification comes down to one thing: the certification
is extremely hard to obtain, as it should be when it comes to any elite
certification.
NSE 8 Exam
The NSE 8 exam has two components: a written exam and a practical. To pass these
challenging exams you will need to work hard.
You can start by setting goals to study the areas you know the least and
dedicating a great amount of time practising in real lab scenarios.
In addition to self-study, you can attend the PrepForce 8 bootcamps (nse8.com),
though by Fortinet Certified Trainers, and NSE 8 certified expert themselves. As
an added benefit, you will be able to ask questions and receive useful tips on
how to approach the NSE 8 exam.
The PrepForce 8 advanced learning bootcamps are the first in the market
dedicated to addressing the Fortinet NSE 8 certification. Designed to be as
challenging as the exam itself, the PrepForce 8 bootcamps will increase your
likelihood of passing the official NSE 8 exam.
The NSE 8 certification is valid for two years. To learn more about the NSE 8
Certification. Download the NSE 8 Public Handbook.
It includes details about the Firmware Versions, Exam Components, Recommended
Study Materials, Delivery Process and Grading Procedure.
QUESTION 1 You want to access the JSON API on FortiManager to retrieve information on
an object.
In this scenario, which two methods will satisfy the requirement? (Choose two.)
A. Download the WSDL file from FortiManager administration GUI.
B. Make a call with the curl utility on your workstation.
C. Make a call with the SoapUI API tool on your workstation.
D. Make a call with the Web browser on your workstation.
Correct Answer: AC
QUESTION 2 A customer wants to integrate their on-premise FortiGate with their Azure
infrastructure.
Which two components must be in place to configure the Azure Fabric connector?
(Choose two.)
A. FortiGate-VM virtual appliance deployed on-premise.
B. An inbound policy from the Azure FortiGate-VM virtual appliance.
C. An outbound policy from the Azure FortiGate-VM virtual appliance.
D. A FortiGate-VM virtual appliance deployed in Azure.
Correct Answer: CD
QUESTION 3 You must create a High Availability deployment with two FortiWebs in Amazon
Web Services (AWS); each on
different Availability Zones (AZ) from the same region. At the same time, each
FortiWeb should be able to
deliver content from the Web servers of both of the AZs.
Which deployment would fulfill this requirement?
A. Configure the FortiWebs in Active-Active HA mode and use AWS Elastic Load
Balancer (ELB) for the internal Web servers.
B. Use AWS Elastic Load Balancer (ELB) for both the FortiWebs in standalone mode
and the internal Web servers in an ELB sandwich.
C. Configure the FortiWebs in Active-Active HA mode and use AWS Route 53 to load
balance the internal Web servers.
D. Use AWS Route 53 to load balance the FortiWebs in standalone mode and use AWS
Virtual Private Cloud (VPC) Peering to load balance the internal Web servers.
Description The NSE 7 Network Security Architect designation recognizes your advanced
skills ans ability to deploy, administer, and troubleshoot Fortinet security
solutions.
Who Should Attempt the NSE 7 Certification We recommend this course for network and security professionals who are
involved in the design, administration, and support of security infrastructures
using Fortinet solutions.
Certification To obtain certification, you must pass at least one Fortinet NSE 7 exam.
NSE 7 certification is valid for two years from the date of completion.
Fortinet NSE 7 - Secure Access 6.2 Exam series: NSE7_SAC-6.2
Number of questions: 30
Time allowed to complete: 60 minutes
Language: English and Japanese
Product version: FortiOS 6.2
Status: Available
QUESTION 1 Which step can be taken to ensure that only FortiAP devices receive IP
addresses from a DHCP server on FortiGate?
A. Change the interface addressing mode to FortiAP devices.
B. Create a reservation list in the DHCP server settings.
C. Configure a VCI string value of FortiAP in the DHCP server settings.
D. Use DHCP option 138 to assign IPs to FortiAP devices.
Correct Answer: C
QUESTION 2 Which two EAP methods can use MSCHAPV2 for client authentication? (Choose
two.)
A. PEAP
B. EAP-TTLS
C. EAP-TLS
D. EAP-GTC
Correct Answer: AC
QUESTION 2 Which two statements about the use of digital certificates are true? (Choose
two.)
A. An intermediate CA can sign server certificates.
B. An intermediate CA can sign another intermediate CA certificate.
C. The end entity's certificate can only be created by an intermediate CA.
D. An intermediate CA can validate the end entity certificate signed by another
intermediate CA.
