NSE7_PBC-7.2問題集、Fortinet実際の試験問題

質問 1

Refer to Exhibit. The exhibit shows the Connect Peers settings on Amazon Web Services (AWS) transit gateway attachments with two FortiGate VMS in a security VPC.

Which two statements are correct? (Choose two.)

A. The Transit Gateway GRE address is auto-generated

B. The peer GRE address is the FortiGate external interface IP address.

C. The Peer GRE address is the FortiGate internal interface IP address

D. The BGP inside CIDR blocks can be any CIDR block with /29

正解: A,B

解説: (PassTest メンバーにのみ表示されます)

質問 2

Refer to the exhibit. A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Linux1 and Linux2 instances to the internet through the security VPC (virtual private cloud). The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface. Assume there are no issues with the Transit Gateway (TGW) configuration.

Which two settings must the customer add to correct the issue? (Choose two.)

A. Both landing subnets in the security VPC must have a 0.0.0.0/0 traffic route to the FortiGate port2.

B. Both landing subnets in the spoke VPCs must have a 0.0.0.0/0 traffic route to the Internet Gateway (IOW).

C. The four landing subnets in all the VPCs must have a 0.0.0.0/0 traffic route to the TGW

D. Both landing subnets in the spoke VPCs must have a 0.0.0.0/0 traffic route to the TGW

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit. Consider the active-active load balance sandwich scenario in Microsoft Azure.

What are two important facts in the active-active load balance sandwich scenario? (Choose two )

A. It uses the FGCP protocol

B. It supports session synchronization for handling asynchronous traffic.

C. It is recommended to enable NAT on FortiGate policies.

D. It uses the vdom-exception command to exclude the configuration from being synced

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

質問 4

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

A. You must specify a /29CIDR block from the 169.254.0.0/16 range

B. You cannot use IPv6 addresses

C. You must configure the second address from the IPv4 range on the device as the BGP IP address

D. The inside CIDR blocks are used for BGP peering

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Refer to the exhibit. You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services (AWS).

You examined the variables.tf file.
What will be the final result after running the terraform init and terraform apply commands?

A. Terraform will deploy a FortiGate VM in the eu-West-Ia region with private and public subnets.

B. Terraform will deploy a FortiGate VM in the eu-West-Ia region without any subnets.

C. Terraform will deploy a FortiGate VM in the eu-West-1a region with two subnets and byol license.

D. Terraform will not deploy a FortiGate VM

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 6

You are using Red Hat Ansible to change the FortiGate VM configuration. What is the minimum number of files you must create and which file must you use to configure the target FortiGate IP address?

A. Create one file and use the variable file

B. Create two files and use the hosts file

C. Create two files and use the .yami file.

D. Create three files and use the .yarai file.

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 7

When adding the Amazon Web Services (AWS) account to the FortiCNP, which three mandatory configuration steps must you follow? (Choose three.)

A. Add AWS accounts through FortiCNP.

B. Enable cloud protection through AWS Guard Duty and AWS Inspector

C. Accept FortiCNP to create CloudTrail for the account

D. Enable cross-reg Ion aggregation

E. Launch the CloudFormation template.

正解: A,C,E

解説: (PassTest メンバーにのみ表示されます)

質問 8

You are troubleshooting an Azure SDN connectivity issue with your FortiGate VM.
Which two queries does that SDN connector use to interact with the Azure management API?
(Choose two.)

A. There is only one query initiating from FortiGate port1 -

B. The first query is targeted to IP address 8.8

C. Some queries are made to manage public IP addresses.

D. The first query is targeted to a special IP address to get a token.

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 9

How does an administrator secure container environments from newly emerged security threats?

A. Use distributed network-related application control signatures.

B. Use Amazon AWS-related application control signatures

C. Use Amazon AWS_S3-related application control signatures

D. Use Docker-related application control signatures

正解: D

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 7 - Public Cloud Security 7.2 - NSE7_PBC-7.2 模擬練習