VCEdump

NSE7_PBC-7.2 Fortinet NSE 7 - Public Cloud Security 7.2

PDF question preview Back to product

Free preview

9 sample questions

The complete product contains 59 questions.

Question formats

Single choice6

Multiple choice3

Compare study plans

Fortinet · NSE7_PBC-7.2

NSE7_PBC-7.2 questions and answers

Review the question wording, option layout, and available explanations before choosing a study plan.

Question 1

Multiple choice

What are two main features in Amazon Web Services (AWS) network access control lists (ACLs)? (Choose two.)

A
You cannot use Network ACL and Security Group at the same time.
B
The default network ACL is configured to allow all traffic
C
NetworkACLs are stateless, and inbound and outbound rules are used for traffic filtering
D
Network ACLs are tied to an instance

Question 2

Single choice

Refer to the exhibit.

What could be the reason that the administrator cannot access the EC2 instance?

A
You must elevate the permissions to access the EC2 instance
B
You must run the chmod 400 Staging-key.peracommand before accessing the instance.
C
There is no . pem key created on in Amazon Web Services (AWS)
D
The directory location of the . pem file is incorrect.

Question 3

Single choice

How does Terraform keep track of provisioned resources?

A
It uses the terraform. tf state file
B
Terraform does not keep the state of resources created
C
It uses the terraform. tfvars file.
D
It uses the database. tf file.

Question 4

Single choice

What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD-WAN?

A
It eliminates the use of ECMP
B
You can use GRE-based tunnel attachments
C
You can combine it with IPsec to achieve higher bandwidth
D
You can use BGP over IPsec for maximum throughput

Question 5

Multiple choice

Which two Amazon Web Services (AWS) features do you use for the transit virtual private cloud (VPC) automation process to add new spoke N/PCs? (Choose two )

A
Amazon S3 bucket
B
AWS Security Hub
C
AWS Transit Gateway
D
Amazon CloudWatch

Question 6

Single choice

Refer to the exhibit.

You are configuring a second route table on a Transit Gateway to accommodate east-west traffic inspection between two VPCs_However, you are getting an error during the transit gateway route table association With the Connect attachment.

Which action Should you take to fulfill your requirement?

A
Add both Associations and Propagations in the second TGW route table.
B
Delete the both Connect and Transport attachments from the first TGW route table
C
Add a static route in the Routes section
D
In the second route table: create a propagation with the Connect attachment.

Question 7

Single choice

How does the immutable infrastructure strategy work in automation?

A
It runs a single live environment for configuration changes.
B
It runs one idle and a single live environment for configuration changes.
C
It runs two live environments for configuration changes.
D
It runs one idle and two live environments for configuration changes.

Question 8

Multiple choice

Refer to Exhibit:

You are troubleshooting a Microsoft Azure SDN connector issue on your FortiGate VM in Azure

Which three settings should you check while troubleshooting this problem? (Choose three.)

A
Use the show vdom command to see hidden VDOMs.
B
use the diag sys va command.
C
Ensure FortiGate port4 can resolve DNS.
D
Ensure FortiGate portl has internet access
E
Ensure IP address 169.254.169_254 is not blocked

Question 9

Single choice

Refer to the exhibit

An administrator is trying to deploy a FortiGate VM in Microsoft Azure using Terraform However, during the configuration, the Azure client secret is no longer visible in the Azure portal.

How would the administrator obtain the Azure client secret to configure on Terratorm?

A
The administrator must create a new Azure account
B
Log in to the Azure CLI with power user to obtain the client secret
C
The administrator can create a new client secret
D
The administrator must obtain the client secret through Azure Cloud Shell.