NSE7_PBC-7.2問題集、Fortinet実際の試験問題

質問 1

Which two attachments are necessary to connect a transit gateway to an existing VPC with BGP?
(Choose two )

A. A transport attachment

B. A GRE attachment

C. A connect attachment

D. A BGP attachment

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 2

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

A. You must specify a /29CIDR block from the 169.254.0.0/16 range

B. You cannot use IPv6 addresses

C. You must configure the second address from the IPv4 range on the device as the BGP IP address

D. The inside CIDR blocks are used for BGP peering

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit. A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Web servers to the Internet. The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface.

What are two possible reasons for this behavior? (Choose two.)

A. AWS source and destination checks are enabled on the FortiGate interfaces.

B. The Internet gateway (IGW) is not added to VPC (virtual private cloud).

C. AWS security groups may be blocking the traffic.

D. The web servers are not configured with the default gateway.

正解: A,C

質問 4

Refer to Exhibit. After the initial Terraform configuration in Microsoft Azure, the terraform plan command is run.

Which two statements about running the plan command are true? (Choose two.)

A. You cannot run the terraform apply command before the terraform plan command.

B. The terraform plan command will deploy the rest of the resources except the service principle details.

C. The terraform plan command makes terraform do a dry run.

D. You must run the terraform init command once, before the terraform plan command

正解: C,D

解説: (PassTest メンバーにのみ表示されます)

質問 5

You are adding more spoke VPCs to an existing hub and spoke topology. Your goal is to finish this task in the minimum amount of time without making errors.
Which Amazon AWS services must you subscribe to accomplish your goal?

A. GuardDuty, CloudWatch

B. CloudWatch, S3

C. Inspector, S3

D. WAF, DynamoDB

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 6

You are asked to find a solution to replace the existing VPC peering topology to have a higher bandwidth connection from Amazon Web Services (AWS) to the on-premises data center.
Which two solutions will satisfy the requirement? (Choose two.)

A. Use the transit gateway attachment With VPN option to create multiple VPN connections to the on-premises data center

B. Use ECMP and VPN to achieve higher bandwidth.

C. Use transit VPC to build multiple VPC connections to the on-premises data center

D. Use a transit VPC with hub and spoke topology to create multiple VPN connections to the on- premises data center.

正解: A,D

解説: (PassTest メンバーにのみ表示されます)

質問 7

An organization deployed a FortiGate-VM in the Google Cloud Platform and initially configured it with two vNICs. Now, the same organization wants to add additional vNICs to this existing FortiGate- VM to support different workloads in their environment.
How can they do this?

A. They can create additional vNICs using the Cloud Shell.

B. They can create additional vNICs in the UI console.

C. They cannot create and add additional vNICs to an existing FortiGate-VM.

D. They can use the Compute Engine API Explorer.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

What kind of underlying mechanism does Transit Gateway Connect use to send traffic from the virtual private cloud (VPC) to the transit gateway?

A. A transport attachment

B. A GRE attachment

C. A BGP attachment

D. Transit Gateway Connect attachment

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

Refer to the exhibit. An administrator has deployed a FortiGate VM in Amazon Web Services (AWS) and is trying to access it using its public IP address from their local computer. However, the connection is not successful and at the same time FortiGate is not receiving any HTTPS or SSH traffic to its external interface. What should the administrator check for possible issue?

A. Check the inbound network security group rules

B. Check the FortiGate instance ID

C. Check the FortiGate firewall policies

D. Run a debug flow to check any network ACLs

正解: A

解説: (PassTest メンバーにのみ表示されます)

質問 10

You are using Red Hat Ansible to change the FortiGate VM configuration. What is the minimum number of files you must create and which file must you use to configure the target FortiGate IP address?

A. Create one file and use the variable file

B. Create two files and use the hosts file

C. Create two files and use the .yami file.

D. Create three files and use the .yarai file.

正解: B

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 7 - Public Cloud Security 7.2 - NSE7_PBC-7.2 模擬練習