NSE7_CDS_AR-7.6問題集、Fortinet実際の試験問題

質問 1

You are troubleshooting a FortiGate active-passive SDN connector solution in Microsoft Azure.
Which two mandatory SDN connector settings are required for a successful deployment?
(Choose two.)

A. Directory ID

B. Client secret

C. Active FortiGate serial number

D. FortiGate license file

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 2

Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.
What is an advantage of choosing Azure Bicep over other IaC tools available?

A. Azure Bicep provides immediate support for all Azure services, including those in preview.

B. Azure Bicep can reduce deployment costs by limiting resource utilization during testing.

C. Azure Bicep generates deployment logs that are optimized to improve error handling.

D. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 3

Which statement about Amazon Web Services (AWS) Transit Gateway is true for SD-WAN transit gateway (TGW) Connect with FortiGate?

A. The TGW plugin must be used with a VPN to achieve higher bandwidth.

B. The Generic Routing Encapsulation (GRE)-based tunnel attachments are slower than IPsec tunnels.

C. Attaching a virtual private cloud (VPC) to the TGW automatically adds new routes to the subnet route table.

D. TGW supports BGP to share routes with FortiGate.

正解: C

質問 4

Refer to the exhibit. After analyzing the native monitoring tools available in Azure, an administrator decides to use the tool displayed in the exhibit.
Why would an administrator choose this tool?

A. To help debug issues affecting virtual network gateways.

B. To obtain, and later examine, traffic flow data with a visualization tool.

C. To view details about Azure resources and their relationships across multiple regions.

D. To compare the latency of an on-premises site with the latency of an Azure application.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

An administrator is trying to implement FortiCNP with Microsoft Azure Security integration.
However, FortiCNP is not able to extract any cloud integration data from Azure; therefore, real- time cloud security monitoring is not possible.
What is causing this issue?

A. The organization is using a free Azure AD license.

B. The administrator enabled the wrong Defender plan for servers.

C. The Azure account doesn't have the Global Administrator role.

D. The FortiCNP account in Azure has the Storage Blob Data Reader role.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 6

Refer to the exhibit. You are managing an active-passive FortiGate HA cluster in AWS that was deployed using CloudFormation. You have created a change set to examine the effects of some proposed changes to the current infrastructure. The exhibit shows some sections of the change set.
What will happen if you apply these changes?

A. This deployment can be done without any traffic interruption.

B. CloudFormation checks if you will surpass your account quota.

C. Both FortiGate VMs will get a new PhysicalResourceId.

D. The updated FortiGate VMs will not have the latest configuration changes.

正解: C

質問 7

Refer to the exhibit. An administrator is trying to deploy a FortiGate VM in Microsoft Azure using Terraform. However, during the configuration, the Azure client secret is no longer visible in the Azure portal.
How would the administrator obtain the Azure client secret to configure on Terraform?

A. Create a new client secret and take note of it.

B. Create a new Azure account and assign it the Administrator role.

C. Use the Terraform output file values to obtain the client secret.

D. Log in to the Azure CLI as a power user to obtain the client secret.

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 8

Refer to the exhibit. An administrator deployed an HA active-active load balance sandwich in Microsoft Azure. The setup requires configuration synchronization between devices.
What can you conclude from the configured settings shown in the exhibit? (Choose two.)

A. By default, FortiGate uses FGCP.

B. It does not synchronize the FortiGate hostname.

C. FortiGate A and FortiGate B are two independent devices.

D. FortiGate-VM instances are scaled out automatically according to predefined workload levels.

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 7 - Public Cloud Security 7.6 Architect - NSE7_CDS_AR-7.6 模擬練習