Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet Exam NSE8_812 Topic 5 Question 36 Discussion

Actual exam question for Fortinet's NSE8_812 exam
Question #: 36
Topic #: 5
[All NSE8_812 Questions]

A FortiGate is configured to perform outbound firewall authentication with Azure AD as a SAML IdP.

What are two valid interactions that occur when the client attempts to access the internet? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, C

a) Systems running on Azure will need to go through the main data center to access the services on Oracle Cloud. This is because the Oracle Cloud is not directly connected to the Azure Cloud. The traffic will need to go through the main data center in order to reach the Oracle Cloud.

c) Branch FortiGate devices must be configured as VPN clients for the branches' internal network to be able to access Oracle services without using public IPs. This is because the Oracle Cloud does not allow direct connections from the internet. The traffic will need to go through the FortiGate devices in order to reach the Oracle Cloud.

The other options are not correct.

b) Use FortiGate VM for IPSEC over ExpressRoute, as traffic is not encrypted by Azure. This is not necessary. Azure does encrypt traffic over ExpressRoute.

d) Two ExpressRoute services to the main data center are required to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge. This is not necessary. A single ExpressRoute service can be used to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge.


Contribute your Thoughts:

Kasandra
3 days ago
I'm not sure about option C. Does the client browser really forward the SAML response to FortiGate?
upvoted 0 times
...
Leigha
4 days ago
I agree with you, Salena. Option B is also valid because the IdP sends the SAML response to FortiGate.
upvoted 0 times
...
Salena
7 days ago
I think option A is correct because FortiGate sends a SAML request to the IdP.
upvoted 0 times
...

Save Cancel