Fortinet NSE7_PBC-7.2 Real Exam Questions
The questions for NSE7_PBC-7.2 were last updated at Jul 24,2024.
- Exam Code: NSE7_PBC-7.2
- Exam Name: Fortinet NSE 7 Public Cloud Security 7.2 (FCSS)
- Certification Provider: Fortinet
- Latest update: Jul 24,2024
Refer to the exhibit
You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services (AWS).
You examined the variables.tf file.
What will be the final result after running the terraform init and terraform apply commands?
- A . Terraform will not deploy a FortiGate VM
- B . Terraform will deploy a FortiGate VM in the eu-West-Ia region with private and public subnets.
- C . Terraform will deploy a FortiGate VM in the eu-West-1a region with two subnets and byol license.
- D . Terraform will deploy a FortiGate VM in the eu-West-Ia region without any subnets.
You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table.
Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?
- A . Connect attachment
- B . VPC attachment
- C . Route attachment
- D . GRE attachment
Your administrator instructed you to deploy an Azure vWAN solution to create a connection between the main company site and branch sites to the other company VNETs.
What are the two best connection solutions available between your company headquarters, branch sites, and the Azure vWAN hub? (Choose two.)
- A . ExpressRoute
- B . GRE tunnels
- C . SSL VPN connections
- D . An L2TP connection
- E . VPN Gateway
Refer to the exhibit
You deployed an HA active-passive FortiGate VM in Microsoft Azure.
Which two statements regarding this particular deployment are true? (Choose two.)
- A . During the failover, the passive FortiGate issues API calls to Azure
- B . Use the vdom-excepticn command to synchronize the configuration.
- C . There is no SLA for API calls from Microsoft Azure.
- D . By default, the configuration does not synchromze between the primary and secondary devices.
You are adding more spoke VPCs to an existing hub and spoke topology Your goal is to finish this task in the minimum amount of time without making errors.
Which Amazon AWS services must you subscribe to accomplish your goal?
- A . GuardDuty, CloudWatch
- B . WAF, DynamoDB
- C . Inspector, S3
- D . CloudWatch, S3
Refer to the exhibit
You are tasked with deploying a webserver and FortiGate VMS in AWS_ You are using Terraform to automate the process
Which two important details should you know about the Terraform files? (Choose two.)
- A . All the output values are available after a successful terraform apply command
- B . The subnet_private 1 value is defined in the variables . tf file
- C . After the deployment, Terraform output values are visible only through AWS CloudShell.
- D . You must specify all the AWS credentials in the output. of file.