Fortinet NSE 7 - Public Cloud Security 7.6 Architect - NSE7_CDS_AR-7.6 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

You are experiencing intermittent connectivity issues in a FortiGate HA cluster deployed with Azure gateway load balancer. Traffic is being dropped when it passes through the cluster.
What is the cause of the issue?

A. The protected VMs are running an application that fragments packets. B. The Azure gateway load balancer is blocking large packets, causing traffic failures. C. The FortiGate firewalls are using the default maximum transmission unit (MTU) size supported by Azure. D. The Azure gateway load balancer is configured with an incorrect health probe port.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit. In your Amazon Web Services (AWS), you must allow inbound HTTPS access to the Customer VPC FortiGate VM from the internet. However, your HTTPS connection to the FortiGate VM in the Customer VPC is not successful.
Also, you must ensure that the Customer VPC FortiGate VM sends all the outbound internet traffic through the Security VPC.
How do you correct this issue with minimal configuration changes? (Choose three.)

A. Add a route with your local internet public IP address as the destination and the internet gateway as the target. B. Deploy an internet gateway, associate an EIP with the Customer VPC private subnet, and then add a new route with destination 0.0.0.0/0 with the internet gateway as the target. C. Add a route to the destination 0.0.0.0/0 with the transit gateway as the target. D. Deploy an internet gateway, attach it to the Customer VPC, and then associate an EIP with port1 of the FortiGate in the Customer VPC. E. Add a route with your local internet public IP address as the destination and the transit gateway as the target.

Discussion 0

Correct Answer: A,C,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit. The exhibit shows partial output of changes that AWS found after you created a new change set.
What can you conclude from this output if you decide to execute this change set?

A. Executing this change set will create a new VM, unless you do not have proper permissions. B. Resources deployed successfully will remain, even if other resources fail during execution. C. CloudFormation will check your account quota before executing the change set, to prevent errors. D. You should refer to the AWS documentation to prevent unplanned service interruptions.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

An Azure administration team is looking for a FortiGate high availability (HA) solution that is able to:
- Filter east-west traffic
- Filter north-south traffic
- Scale up
- Scale out
Which HA deployment meets all of the requirements?

A. Active-active with Azure Gateway load balancer B. Active-active with external and internal load balancers C. Active-passive with external and internal load balancers D. Active-passive with SDN connector

Discussion 0

Correct Answer: B Vote an answer

Question 5

An administrator is planning to use FortiDevSec to detect vulnerabilities in container images and is researching any platform limitations that they must take into account when using that tool. What is a limitation of FortiDevSec container security scanning?

A. It focuses on scanning for encrypted secrets in containerized applications. B. It can detect vulnerabilities in containerized applications in Amazon Web Services (AWS) environments only. C. It does not support scanning private images that require Docker login. D. It is limited to dynamic application testing of container images.

Discussion 0

Correct Answer: C Vote an answer

Question 6

An administrator is trying to implement FortiCNP with Microsoft Azure Security integration.
However, FortiCNP is not able to extract any cloud integration data from Azure; therefore, real- time cloud security monitoring is not possible.
What is causing this issue?

A. The administrator enabled the wrong Defender plan for servers. B. The Azure account doesn't have the Global Administrator role. C. The FortiCNP account in Azure has the Storage Blob Data Reader role. D. The organization is using a free Azure AD license.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

You have deployed a FortiGate HA cluster in Azure using a Gateway Load Balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.
What can be the cause of the issue?

A. The Gateway Load Balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through. B. The protected VMs are in a different Azure subscription, which prevents the Gateway Load Balancer from forwarding traffic. C. The health probes for the Gateway Load Balancer are failing, which causes traffic to bypass the HA cluster. D. The Fortinet VMs have IP forwarding disabled, which is required for traffic inspection.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost.
Which solution meets the requirements?

A. Use FortiCNP B. Use FortiWeb C. Use FortiADC D. Use FortiGate

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).