Fortinet Exam NSE8_812 Topic 5 Question 36 Discussion

Actual exam question for Fortinet's NSE8_812 exam

Question #: 36
Topic #: 5

[All NSE8_812 Questions]

A FortiGate is configured to perform outbound firewall authentication with Azure AD as a SAML IdP.

What are two valid interactions that occur when the client attempts to access the internet? (Choose two.)

AFortiGate SP sends a SAML request to the IdP.

BThe Microsoft SAML IdP sends the SAML response to the FortiGate SP.

CThe client browser forwards the SAML response received from Microsoft SAML IdP to the FortiGate SP.

DFortiGate SP redirects the client browser to the local captive portal and then redirects to the Microsoft SAML IdP.

Show Suggested Answer

Suggested Answer: A, C

a) Systems running on Azure will need to go through the main data center to access the services on Oracle Cloud. This is because the Oracle Cloud is not directly connected to the Azure Cloud. The traffic will need to go through the main data center in order to reach the Oracle Cloud.

c) Branch FortiGate devices must be configured as VPN clients for the branches' internal network to be able to access Oracle services without using public IPs. This is because the Oracle Cloud does not allow direct connections from the internet. The traffic will need to go through the FortiGate devices in order to reach the Oracle Cloud.

The other options are not correct.

b) Use FortiGate VM for IPSEC over ExpressRoute, as traffic is not encrypted by Azure. This is not necessary. Azure does encrypt traffic over ExpressRoute.

d) Two ExpressRoute services to the main data center are required to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge. This is not necessary. A single ExpressRoute service can be used to implement SD-WAN between a FortiGate VM in Azure and a FortiGate device at the data center edge.

by Dana at Sep 18, 2024, 04:25 AM

Limited Time Offer

25%

Off

Get Premium NSE8_812 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Annabelle

1 months ago

A and B, no doubt. Although I do wonder if the FortiGate has a good taste in music while it's waiting for the SAML response...

upvoted 0 times

Margarita

8 days ago

A) FortiGate SP sends a SAML request to the IdP.

upvoted 0 times

...

Renay

1 months ago

A and B, for sure. The client is just along for the ride - the FortiGate and Azure AD are the ones doing the SAML dance.

upvoted 0 times

...

Devora

1 months ago

A and B sound right to me. Although option D does mention a captive portal, that's not part of the SAML flow itself.

upvoted 0 times

Caren

1 days ago

A) FortiGate SP sends a SAML request to the IdP.

upvoted 0 times

...

Alverta

2 months ago

This is a tricky one, but I'd go with A and B. The client browser doesn't directly interact with the IdP, that's the FortiGate's job.

upvoted 0 times

Shelton

15 days ago

Exactly, the client browser doesn't directly interact with the IdP in this scenario.

upvoted 0 times

...

Zachary

16 days ago

Yeah, the FortiGate SP sends a SAML request to the IdP and then the IdP sends the SAML response back.

upvoted 0 times

...

Quinn

1 months ago

That's correct, the client browser doesn't directly interact with the IdP in this scenario.

upvoted 0 times

...

Chantay

1 months ago

I think you're right, A and B seem to be the correct interactions.

upvoted 0 times

...

Tuyet

1 months ago

Yes, the FortiGate SP sends a SAML request to the IdP, and then the IdP sends the SAML response back to the FortiGate SP.

upvoted 0 times

...

Berry

1 months ago

I think you're right, A and B seem to be the correct interactions.

upvoted 0 times

...

Frank

2 months ago

Definitely A and B. The FortiGate is the service provider, so it sends the SAML request, and the Azure AD IdP responds with the SAML response.

upvoted 0 times

Hyun

1 months ago

And then the Microsoft SAML IdP sends the SAML response back to the FortiGate SP.

upvoted 0 times

...

Nidia

2 months ago

Yes, you're right. The FortiGate SP sends a SAML request to the IdP.

upvoted 0 times

...

Maile

2 months ago

I think options A and B are the valid interactions. The FortiGate SP needs to initiate the SAML request, and the IdP needs to respond with the SAML response.

upvoted 0 times

...