最新的Fortinet NSE7_CDS_AR-7.6免費考試真題

問題1

Which statement about Amazon Web Services (AWS) Transit Gateway is true for SD-WAN transit gateway (TGW) Connect with FortiGate?

A. The TGW plugin must be used with a VPN to achieve higher bandwidth.

B. The Generic Routing Encapsulation (GRE)-based tunnel attachments are slower than IPsec tunnels.

C. Attaching a virtual private cloud (VPC) to the TGW automatically adds new routes to the subnet route table.

D. TGW supports BGP to share routes with FortiGate.

正確答案: C

問題2

An organization is deploying FortiDevSec to enhance security for containerized applications, and they need to ensure containers are monitored for suspicious behavior at runtime. Which FortiDevSec feature is best for detecting runtime threats?

A. FortiDevSec Container Scanner

B. FortiDevSec Dynamic Application Security Testing (DAST)

C. FortiDevSec Static Application Security Testing (SAST)

D. FortiDevSec Software Composition Analysis (SCA)

正確答案: A

說明：（僅 Fast2test 成員可見）

問題3

Refer to the exhibit. You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services (AWS). You examined the variables.tffile. Assume that all the other terraform files are in place.
What will be the final result after running the terraform initand terraform apply commands?

A. Terraform will deploy a FortiGate VM in the eu-West-1 region with private and public subnets.

B. Terraform will not deploy a FortiGate VM.

C. Terraform will deploy a FortiGate VM in the eu-West-1a availability zone without any subnets.

D. Terraform will deploy a FortiGate VM in the eu-West-1a availability zone with two subnets and BYOL license.

正確答案: D

說明：（僅 Fast2test 成員可見）

問題4

Which statement about Transit Gateway (TGW) in Amazon Web Services (AWS) is true?

A. TGW can have multiple TGW route tables.

B. The TGW default route table cannot be disabled.

C. A TGW attachment can be associated with multiple TGW route tables.

D. Both the TGW attachment and propagation must be in the same TGW route table.

正確答案: A

說明：（僅 Fast2test 成員可見）

問題5

Refer to the exhibit. In which type of FortiCNP insights can an administrator examine the findings triggered by this policy?

A. Data

B. Threat

C. User activity

D. Risk

正確答案: B

說明：（僅 Fast2test 成員可見）

問題6

Your administrator instructed you to deploy an Azure vWAN solution to create a connection between the main company site and branch sites to the other company VNETs.
What is the best connection solution available between your company headquarters, branch sites, and the Azure vWAN hub?

A. ExpressRoute

B. An L2TP connection

C. GRE tunnels

D. SSL VPN connections

正確答案: A

說明：（僅 Fast2test 成員可見）

問題7

Refer to the exhibit. Your team notices an unusually high volume of traffic sourced at one of the organizations FortiGate EC2 instances. They create a flow log to obtain and analyze detailed information about this traffic. However, when they checked the log, they found that it included traffic that was not associated with the FortiGate instance in question.
What can they do to obtain the correct logs?

A. Send the logs to Amazon Data Firehose instead to get more granular information.

B. Create a new flow log at the interface level.

C. Ensure that the flow log data is not mixed with the rest of the traffic.

D. Change the maximum aggregation time to 1 minute.

正確答案: B

說明：（僅 Fast2test 成員可見）

問題8

What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD- WAN?

A. You can use BGP over IPsec for maximum throughput.

B. It eliminates the use of ECMP.

C. You can combine it with IPsec to achieve higher bandwidth.

D. You can use GRE-based tunnel attachments.

正確答案: D

說明：（僅 Fast2test 成員可見）

最新的Fortinet NSE 7 - Public Cloud Security 7.6 Architect - NSE7_CDS_AR-7.6免費考試真題

聯系我們

站內鏈接

最新更新