Fortinet NSE 7 - Public Cloud Security 7.2 - NSE7_PBC-7.2 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

Which three properties are configurable Microsoft Azure network security group rule settings?
(Choose three.)

A. Sequence number B. Action C. Source and destination IP ranges D. Source port ranges E. Destination port ranges

Discussion 0

Correct Answer: B,D,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

Which two Amazon Web Services (AWS) topologies support east-west traffic inspection within the AWS cloud by the FortiGate VM? (Choose two.)

A. A multiple VPC deployment utilizing a transit VPC topology B. A single VPC deployment with multiple subnets C. A single VPC deployment with multiple subnets and a NAT gateway D. A multiple VPC deployment utilizing a transit gateway

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit. The exhibit shows a topology where multiple connections from clients to the same FortiGate-VM instance, regardless of the protocol being used, are required.

Which two statements are correct? (Choose two.)

A. The design shows an active-passive FortiGate-VM architecture. B. The design shows an active-active FortiGate-VM architecture. C. The Cloud Load Balancer Session Affinity setting should use the default value. D. The Cloud Load Balancer Session Affinity setting should be changed to CLIENT_IP.

Discussion 0

Correct Answer: B,D Vote an answer

Question 4

You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table.
Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?

A. Connect attachment B. GRE attachment C. VPC attachment D. Route attachment

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

You are automating configuration changes on one of the FortiGate VMS using Linux Red Hat Ansible.
How does Linux Red Hat Ansible connect to FortiGate to make the configuration change?

A. It uses SSH as a connection method to FortiOS. B. It uses a FortiGate internal or external IP address with TCP port 21 C. It uses an API. D. It uses YAML

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Which statement about Transit Gateway (TGW) in Amazon Web Services (AWS) is true?

A. TGW can have multiple TGW route tables. B. A TGW attachment can be associated with multiple TGW route tables. C. The TGW default route table cannot be disabled. D. Both the TGW attachment and propagation must be in the same TGW route table

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit. The exhibit shows the results of a FortiCNP registry scan.

Which two statements are correct? (Choose two )

A. The registry scan is part of the FortiCNP container protection. B. When adding a repository, you can leave the Tag section blank to scan all images- C. When adding a repository, you can add a minimum number of images to be imported through the CAP section. D. The registry scan is part of the FortiCNP cloud protection.

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Refer to Exhibit. You are troubleshooting a Microsoft Azure SDN connector issue on your FortiGate VM in Azure.

Which three settings should you check while troubleshooting this problem? (Choose three.)

A. Ensure IP address 169.254.169.254 is not blocked B. use the diag sys va command. C. Ensure FortiGate port4 can resolve DNS. D. Use the show vdom command to see hidden VDOMs. E. Ensure FortiGate port1 has internet access

Discussion 0

Correct Answer: A,C,E Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 9

Which statement about immutable infrastructure in automation is true?

A. It is the practice of modifying the existing server configuration after it is deployed B. It is the practice of deploying a new server for every configuration change C. It is the practice of applying hotfixes and OS patches after deployment D. It is the practice of deploying two parallel servers for high availability.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

Refer to the exhibit. You are deploying a FortiGate-VM in Microsoft Azure using the PAYG/On- demand licensing model. After you configure the FortiGate-VM, the validation process fails, displaying the error shown in the exhibit.

What caused the validation process to fail?

A. You selected the PAYG/On-demand licensing model, but did not associate a valid Azure subscription. B. You selected the Bring Your Own License (BYOL) licensing mode. C. You selected the PAYG/On-demand licensing model, but did not select correct virtual machine size. D. You selected the incorrect resource group.

Discussion 0

Correct Answer: A Vote an answer