Exam NSE8_812 topic 1 question 54 discussion

Actual exam question from Fortinet's NSE8_812

Question #: 54
Topic #: 1

A remote IT Team is in the process of deploying a FortiGate in their lab. The closed environment has been configured to support zero-touch provisioning from the FortiManager, on the same network, via DHCP options. After waiting 15 minutes, they are reporting that the FortiGate received an IP address, but the zero-touch process failed.
The exhibit below shows what the IT Team provided while troubleshooting this issue:

Which statement explains why the FortiGate did not install its configuration from the FortiManager?

A. The FortiGate was not configured with the correct pre-shared key to connect to the FortiManager
B. The DHCP server was not configured with the FQDN of the FortiManager
C. The DHCP server used the incorrect option type for the FortiManager IP address
D. The configuration was modified on the FortiGate prior to connecting to the FortiManager

Show Suggested Answer

Suggested Answer: D 🗳️

by Viewable8041 at Sept. 7, 2023, 2:31 p.m.

Comments

Submit Cancel

re_j0hn

9 months, 3 weeks ago

Answer is C. Using DHCP Option 240/241 to discover the FMG.

upvoted 1 times

...

max22222

9 months, 4 weeks ago

it can be route change etc, so the correct is D

upvoted 1 times

...

Golux

11 months, 1 week ago

Selected Answer: D

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-perform-zero-touch-provisioning-with/ta-p/197623

upvoted 1 times

ac89l

10 months, 2 weeks ago

D would be correct if fmg-ip=0.0.0.0

upvoted 1 times

...

ama6

1 year, 2 months ago

Correct C C is correct because the DHCP server used the incorrect option type for the FortiManager IP address. The option type should be 43 instead of 15, as shown in the FortiManager Administration Guide under Zero-Touch Provisioning > Configuring DHCP options for ZTP. References: https://docs.fortinet.com/document/fortimanager/7.4.0/administration-guide/568591/high-availability https://docs.fortinet.com/document/fortimanager/7.4.0/administration-guide/568591/high-availability/568592/configuring-ha-options

upvoted 2 times

...

WBP43

1 year, 2 months ago

Selected Answer: D

Fortigate must be in factory default status https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-perform-zero-touch-provisioning-with/ta-p/197623

upvoted 4 times

...

Viewable8041

1 year, 3 months ago

I do not see any issue here. https://docs.fortinet.com/document/fortigate/6.4.2/administration-guide/861490/zero-touch-provisioning-with-fortimanager

upvoted 3 times

...