最新的Fortinet NSE 7 - Public Cloud Security 7.2 - NSE7_PBC-7.2免費考試真題
You are tasked with deploying a FortiGate HA solution in Amazon Web Services (AWS) using Terraform.
What are two steps you must take to complete this deployment? (Choose two.)
What are two steps you must take to complete this deployment? (Choose two.)
正確答案: B,C
說明：（僅 Fast2test 成員可見）
Refer to the exhibit. A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Linux1 and Linux2 instances to the internet through the security VPC (virtual private cloud). The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface. Assume there are no issues with the Transit Gateway (TGW) configuration.
Which two settings must the customer add to correct the issue? (Choose two.)
Which two settings must the customer add to correct the issue? (Choose two.)
正確答案: A,D
說明：（僅 Fast2test 成員可見）
You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost.
Which solution meets the requirements?
Which solution meets the requirements?
正確答案: D
說明：（僅 Fast2test 成員可見）
Which three properties are configurable Microsoft Azure network security group rule settings?
(Choose three.)
(Choose three.)
正確答案: A,C,D
說明：（僅 Fast2test 成員可見）
You are using Red Hat Ansible to change the FortiGate VM configuration. What is the minimum number of files you must create and which file must you use to configure the target FortiGate IP address?
正確答案: A
說明：（僅 Fast2test 成員可見）
Refer to the exhibit. Which two conditions will enable you to segregate and secure the traffic between the hub and the spokes in Microsoft Azure? (Choose two.)
正確答案: A,B
You need to deploy FortiGate VM devices in a highly available topology in the Microsoft Azure cloud. The following are the requirements of your deployment:
- Two FortiGate devices must be deployed; each in a different availability zone.
- Each FortiGate requires two virtual network interfaces: one will connect to a public subnet and the other will connect to a private subnet.
- An external Microsoft Azure load balancer will distribute ingress traffic to both FortiGate devices in an active- active topology.
- An internal Microsoft Azure load balancer will distribute egress traffic from protected virtual machines to both FortiGate devices in an active-active topology.
- Traffic should be accepted or denied by a firewall policy in the same way by either FortiGate device in this topology.
Which FortiOS CLI configuration can help reduce the administrative effort required to maintain the FortiGate devices, by synchronizing firewall policy and object configuration between the FortiGate devices?
- Two FortiGate devices must be deployed; each in a different availability zone.
- Each FortiGate requires two virtual network interfaces: one will connect to a public subnet and the other will connect to a private subnet.
- An external Microsoft Azure load balancer will distribute ingress traffic to both FortiGate devices in an active- active topology.
- An internal Microsoft Azure load balancer will distribute egress traffic from protected virtual machines to both FortiGate devices in an active-active topology.
- Traffic should be accepted or denied by a firewall policy in the same way by either FortiGate device in this topology.
Which FortiOS CLI configuration can help reduce the administrative effort required to maintain the FortiGate devices, by synchronizing firewall policy and object configuration between the FortiGate devices?
正確答案: A
說明：（僅 Fast2test 成員可見）
When adding the Amazon Web Services (AWS) account to the FortiCNP, which three mandatory configuration steps must you follow? (Choose three.)
正確答案: A,C,D
說明：（僅 Fast2test 成員可見）
Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)
正確答案: A,C
說明：（僅 Fast2test 成員可見）
How does Terraform keep track of provisioned resources?
正確答案: B
說明：（僅 Fast2test 成員可見）