Free Fortinet NSE 7 – Public Cloud Security 7.2 Exam NSE7_PBC-7.2 Exam Practice Test

You are asked to find a solution to replace the existing VPC peering topology to have a higher bandwidth connection from Amazon Web Services (AWS) to the on-premises data center Which two solutions will satisfy the requirement? (Choose two.)

• Use ECMP and VPN to achieve higher bandwidth.
• Use transit VPC to build multiple VPC connections to the on-premises data center
• Use a transit VPC with hub and spoke topology to create multiple VPN connections to the on- premises data center.
• Use the transit gateway attachment With VPN option to create multiple VPN connections to the
• on-premises data center

You must allow an SSH traffic rule in an Amazon Web Services (AWS) network access list (NACL) to allow SSH traffic to travel to a subnet for temporary testing purposes. When you review the current inbound network ACL rules, you notice that rule number 5 demes SSH and telnet traffic to the subnetWhat can you do to allow SSH traffic?

• You must create a new allow SSH rule below rule number 5
• You must create a new allow SSH rule above rule number 5-
• You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.
• You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.

What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD-WAN?

• It eliminates the use of ECMP
• You can use GRE-based tunnel attachments
• You can combine it with IPsec to achieve higher bandwidth
• You can use BGP over IPsec for maximum throughput

Which two attachments are necessary to connect a transit gateway to an existing VPC with BGP? (Choose two )

• A transport attachment
• A BGP attachment
• A connect attachment
• A GRE attachment

Your goal is to deploy resources in multiple places and regions in the public cloud using Terraform. What is the most efficient way to deploy resources without changing much of the Terraform code?

• Use multiple terraform.tfvars files With a variables.tf file.
• Use the provider. tf file to add all the new values
• Install and configure two Terraform staging servers to deploy resources.
• Use the variable, tf file and edit its values to match multiple resources

How does the immutable infrastructure strategy work in automation?

• It runs a single live environment for configuration changes.
• It runs one idle and a single live environment for configuration changes.
• It runs two live environments for configuration changes.
• It runs one idle and two live environments for configuration changes.

A customer would like to use FortiGate fabric integration With FortiCNPWhen configuring a FortiGate VM to add to FortiCNP, which three mandatory configuration steps must you follow on FortiGate? (Choose three.)

• Enable send logs-
• Create and IPS sensor and a firewall policy
• Create an IPsec tunnel.
• Create an SSL]SSH inspection profile.
• Enable two-factor authentication.

Your administrator instructed you to deploy an Azure vWAN solution to create a connection between the main company site and branch sites to the other company VNETs.What are the two best connection solutions available between your company headquarters, branch sites, and the Azure vWAN hub? (Choose two.)

• ExpressRoute
• GRE tunnels
• SSL VPN connections
• An L2TP connection
• VPN Gateway

An administrator would like to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware. Which Fortinet product or feature should the administrator use?

• FortiCNP application control policies
• FortiCNP web sensitive polices
• FortiCNP DLP policies
• FortiCNP compliance scanning policies

How does Terraform keep track of provisioned resources?

• It uses the terraform. tf state file
• Terraform does not keep the state of resources created
• It uses the terraform. tfvars file.
• It uses the database. tf file.