ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE8_812 All Questions

View all questions & answers for the NSE8_812 exam
Go to Exam

Exam NSE8_812 topic 1 question 54 discussion

Actual exam question from Fortinet's NSE8_812
Question #: 54
Topic #: 1
[All NSE8_812 Questions]

A remote IT Team is in the process of deploying a FortiGate in their lab. The closed environment has been configured to support zero-touch provisioning from the FortiManager, on the same network, via DHCP options. After waiting 15 minutes, they are reporting that the FortiGate received an IP address, but the zero-touch process failed.
The exhibit below shows what the IT Team provided while troubleshooting this issue:

Which statement explains why the FortiGate did not install its configuration from the FortiManager?

  • A. The FortiGate was not configured with the correct pre-shared key to connect to the FortiManager
  • B. The DHCP server was not configured with the FQDN of the FortiManager
  • C. The DHCP server used the incorrect option type for the FortiManager IP address
  • D. The configuration was modified on the FortiGate prior to connecting to the FortiManager
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Viewable8041 at Sept. 7, 2023, 2:31 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
re_j0hn
5 months ago
Answer is C. Using DHCP Option 240/241 to discover the FMG.
upvoted 1 times
...
max22222
5 months ago
it can be route change etc, so the correct is D
upvoted 1 times
...
Golux
6 months, 2 weeks ago
Selected Answer: D
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-perform-zero-touch-provisioning-with/ta-p/197623
upvoted 1 times
ac89l
5 months, 3 weeks ago
D would be correct if fmg-ip=0.0.0.0
upvoted 1 times
...
...
ama6
9 months, 3 weeks ago
Correct C C is correct because the DHCP server used the incorrect option type for the FortiManager IP address. The option type should be 43 instead of 15, as shown in the FortiManager Administration Guide under Zero-Touch Provisioning > Configuring DHCP options for ZTP. References: https://docs.fortinet.com/document/fortimanager/7.4.0/administration-guide/568591/high-availability https://docs.fortinet.com/document/fortimanager/7.4.0/administration-guide/568591/high-availability/568592/configuring-ha-options
upvoted 2 times
...
WBP43
10 months ago
Selected Answer: D
Fortigate must be in factory default status https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-perform-zero-touch-provisioning-with/ta-p/197623
upvoted 4 times
...
Viewable8041
10 months, 2 weeks ago
I do not see any issue here. https://docs.fortinet.com/document/fortigate/6.4.2/administration-guide/861490/zero-touch-provisioning-with-fortimanager
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago