exam questions

Exam NSE8_812 All Questions

View all questions & answers for the NSE8_812 exam

Exam NSE8_812 topic 1 question 42 discussion

Actual exam question from Fortinet's NSE8_812
Question #: 42
Topic #: 1
[All NSE8_812 Questions]

Refer to the exhibit.

A customer has deployed a FortiGate 200F high-availability (HA) cluster that contains a TPM chip. The exhibit shows output from the FortiGate CLI session where the administrator enabled TPM.
Following these actions, the administrator immediately notices that both FortiGate high availability (HA) status and FortiManager status for the FortiGate are negatively impacted.
What are the two reasons for this behavior? (Choose two.)

  • A. The private-data-encryption key entered on the primary did not match the value that the TPM expected.
  • B. Configuration for TPM is not synchronized between FortiGate HA cluster members.
  • C. The FortiGate has not finished the auto-update process to synchronize the new configuration to FortiManager yet.
  • D. TPM functionality is not yet compatible with FortiGate HA.
  • E. The administrator needs to manually enter the hex private data encryption key in FortiManager.
Show Suggested Answer Hide Answer
Suggested Answer: BE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
JackieTYF
2 months, 3 weeks ago
Selected Answer: BE
BE
upvoted 1 times
...
Pat1361
5 months, 4 weeks ago
Selected Answer: BE
i just tested it in the lab.
upvoted 1 times
...
node345
10 months, 2 weeks ago
Selected Answer: BE
B and E are correct: B because of: "In HA configurations, each cluster member must use the same master‑encryption‑key so that the HA cluster can form and its members can synchronize their configurations." E because of "When a FortiGate with the private-data-encryption setting enabled is added to FortiManager, FortiManager requires the FortiGate encryption key to be entered in FortiManager to successfully install device configuration settings and manage the added FortiGate. If the private-data-encryption setting is enabled on an already managed FortiGate, you must manually retrieve device configuration settings again on the FortiManager."
upvoted 2 times
...
Meh057
10 months, 3 weeks ago
https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/30332/verifying-devices-with-private-data-encryption-enabled
upvoted 2 times
...
ama6
1 year, 3 months ago
i"m with you on that one #Viewable8041
upvoted 1 times
...
Viewable8041
1 year, 4 months ago
Selected Answer: BC
Sorry... here the link and the correct answers It is B and C https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/893277/trusted-platform-module-support
upvoted 1 times
...
Viewable8041
1 year, 4 months ago
Sorry... here the link and the correct answers It is B and C https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/893277/trusted-platform-module-support
upvoted 2 times
...
Viewable8041
1 year, 4 months ago
Selected Answer: AC
according to https://docs.fortinet.com/document/fortigate-7000/7.0.12/fortigate-7000f-handbook/254816/tpm-support i am with A and C
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago