Fortinet Exam NSE8_812 Topic 1 Question 26 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 26
Topic #: 1

Refer to the exhibit.

The exhibit shows two error messages from a FortiGate root Security Fabric device when you try to configure a new connection to a FortiClient EMS Server.

Referring to the exhibit, which two actions will fix these errors? (Choose two.)

AVerify that the CRL is accessible from the root FortiGate

BExport and import the FortiClient EMS server certificate to the root FortiGate.

CInstall a new known CA on the Win2K16-EMS server.

DAuthorize the root FortiGate on the FortiClient EMS

Show Suggested Answer

Suggested Answer: A, D

Ais correct because the error message 'The CRL is not accessible' indicates that the root FortiGate cannot access the CRL for the FortiClient EMS server. Verifying that the CRL is accessible will fix this error.

Dis correct because the error message 'The FortiClient EMS server is not authorized' indicates that the root FortiGate is not authorized to connect to the FortiClient EMS server. Authorizing the root FortiGate on the FortiClient EMS server will fix this error.

The other options are incorrect. Option B is incorrect because exporting and importing the FortiClient EMS server certificate to the root FortiGate will not fix the CRL error. Option C is incorrect because installing a new known CA on the Win2K16-EMS server will not fix the authorization error.

References:

Troubleshooting FortiClient EMS connectivity | FortiClient / FortiOS 7.0.0 - Fortinet Document Library

Authorizing FortiGates with FortiClient EMS | FortiClient / FortiOS 6.4.8 - Fortinet Document Library

by Johna at Jun 29, 2024, 07:52 PM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lonny

4 months ago

I bet the folks at Fortinet wish they had named their products something more memorable, like 'Fortress-Gate' or 'Fortify-Client'. Would've saved us all a lot of headaches.

upvoted 0 times

...

Dion

4 months ago

What is this, a FortiGate sudoku puzzle? I'll just pick the two options that sound the most tech-y and hope for the best.

upvoted 0 times

...

I agree with Kattie, verifying the CRL and exporting/importing the certificate should fix the errors.

upvoted 0 times

...

Kattie

6 months ago

I think the correct actions are A and B.

upvoted 0 times

...