Fortinet Exam NSE8_812 Topic 5 Question 36 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 36
Topic #: 5

A customer is planning on moving their secondary data center to a cloud-based laaS. They want to place all the Oracle-based systems Oracle Cloud, while the other systems will be on Microsoft Azure with ExpressRoute service to their main data center.

They have about 200 branches with two internet services as their only WAN connections. As a security consultant you are asked to design an architecture using Fortinet products with security, redundancy and performance as a priority.

Which two design options are true based on these requirements? (Choose two.)

ASystems running on Azure will need to go through the main data center to access the services on Oracle Cloud.

BUse FortiGate VM for IPSEC over ExpressRoute, as traffic is not encrypted by Azure.

CBranch FortiGate devices must be configured as VPN clients for the branches' internal network to be able to access Oracle services without using public IPs.

DTwo ExpressRoute services to the main data center are required to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge

Show Suggested Answer

Suggested Answer: A, C

a) Systems running on Azure will need to go through the main data center to access the services on Oracle Cloud. This is because the Oracle Cloud is not directly connected to the Azure Cloud. The traffic will need to go through the main data center in order to reach the Oracle Cloud.

c) Branch FortiGate devices must be configured as VPN clients for the branches' internal network to be able to access Oracle services without using public IPs. This is because the Oracle Cloud does not allow direct connections from the internet. The traffic will need to go through the FortiGate devices in order to reach the Oracle Cloud.

The other options are not correct.

b) Use FortiGate VM for IPSEC over ExpressRoute, as traffic is not encrypted by Azure. This is not necessary. Azure does encrypt traffic over ExpressRoute.

d) Two ExpressRoute services to the main data center are required to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge. This is not necessary. A single ExpressRoute service can be used to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge.

by Dana at Sep 18, 2024, 04:25 AM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rosenda

2 months ago

Haha, I bet the customer is just hoping the IT team can handle this without any 'ExpressRoute' mishaps. Gotta love those cloud migration projects!

upvoted 0 times

...

I agree with Antonette. Option B makes sense for ensuring security with FortiGate VM.

upvoted 0 times

...

Antonette

3 months ago

I think option B is true because traffic over ExpressRoute is not encrypted by Azure.

upvoted 0 times

...