ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE8_812 All Questions

View all questions & answers for the NSE8_812 exam
Go to Exam

Exam NSE8_812 topic 1 question 29 discussion

Actual exam question from Fortinet's NSE8_812
Question #: 29
Topic #: 1
[All NSE8_812 Questions]

A customer is planning on moving their secondary data center to a cloud-based IaaS. They want to place all the Oracle-based systems on Oracle Cloud, while the other systems will be on Microsoft Azure with ExpressRoute service to their main data center.
They have about 200 branches with two internet services as their only WAN connections. As a security consultant you are asked to design an architecture using Fortinet products with security, redundancy, and performance as a priority.
Which two design options are true based on these requirements? (Choose two.)

  • A. Systems running on Azure will need to go through the main data center to access the services on Oracle Cloud.
  • B. Use FortiGate VM for IPSEC over ExpressRoute, as traffic is not encrypted by Azure.
  • C. Branch FortiGate devices must be configured as VPN clients for the branches’ internal network to be able to access Oracle services without using public IPs.
  • D. Two ExpressRoute services to the main data center are required to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge.
Show Suggested Answer Hide Answer
Suggested Answer: BC 🗳️
by Viewable8041 at Sept. 5, 2023, 9:43 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
JackieTYF
2 months, 3 weeks ago
Selected Answer: BC
https://learn.microsoft.com/en-us/azure/expressroute/expressroute-about-encryption
upvoted 1 times
...
Pat1361
6 months ago
Azure does not encrypt by default so B is correct.
upvoted 1 times
...
node345
10 months ago
Selected Answer: BC
ExpressRoute supports a couple of encryption technologies to ensure confidentiality and integrity of the data traversing between your network and Microsoft's network. By default traffic over an ExpressRoute connection isn't encrypted.
upvoted 2 times
...
ama6
1 year, 3 months ago
B is wrong Whenever Azure customer traffic moves between datacenters, Microsoft applies a data-link layer encryption method using the IEEE 802.1AE MAC Security Standards (MACsec). This encryption is implemented to secure the traffic outside physical boundaries
upvoted 2 times
...
ama6
1 year, 3 months ago
A and C Whenever Azure customer traffic moves between datacenters, Microsoft applies a data-link layer encryption method using the IEEE 802.1AE MAC Security Standards (MACsec). This encryption is implemented to secure the traffic outside physical boundaries
upvoted 2 times
...
Viewable8041
1 year, 4 months ago
Selected Answer: BC
Azure Expressroute is not encrypted.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago