Free Fortinet NSE 7 – Public Cloud Security 7.2 Exam NSE7_PBC-7.2 Exam Practice Test

An administrator would like to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware. Which Fortinet product or feature should the administrator use?

• FortiCNP application control policies
• FortiCNP web sensitive polices
• FortiCNP DLP policies
• FortiCNP compliance scanning policies

You are configuring the failover settings on a FortiGate active-passive SDN connector solution in Microsoft Azure. Which two mandatory settings are required after the initial deployment? (Choose two)

• Subscription-id
• FortiGate license file
• Active FortiGate serial number
• Resource group name

You are tasked with deploying a FortiGate HA solution in Amazon Web Services (AWS) using Terraform What are two steps you must take to complete this deployment? (Choose two.)

• Enable automation on the AWS portal.
• Create an AWS Identity and Access Management (IAM) user With permissions.
• Use CloudSheIl to install Terraform.
• Create an AWS Active Directory user with permissions.

You are automating configuration changes on one of the FortiGate VMS using Linux Red Hat Ansible. How does Linux Red Hat Ansible connect to FortiGate to make the configuration change?

• It uses a FortiGate internal or external IP address with TCP port 21
• It uses SSH as a connection method to FortiOS.
• It uses an API.
• It uses YAML

Which two Amazon Web Services (AWS) features do you use for the transit virtual private cloud (VPC) automation process to add new spoke N/PCs? (Choose two )

• Amazon S3 bucket
• AWS Security Hub
• AWS Transit Gateway
• Amazon CloudWatch

An administrator is looking for a solution that can provide insight into users and data stored in major SaaS applications in the multicloud environment Which product should the administrator deploy to have secure access to SaaS applications?

• FortiProxy
• FortiSandbox
• ForliCASB
• FortiWeb

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

• The inside CIDR blocks are used for BGP peering
• You cannot use IPv6 addresses
• You must specify a /29CIDR block from the 169.254.0.0/16 range
• You must configure the second address from the IPv4 range on the device as the BGP IP address

How does an administrator secure container environments from newly emerged security threats?

• Use distributed network-related application control signatures.
• Use Amazon AWS-related application control signatures
• Use Amazon AWS_S3-related application control signatures
• Use Docker-related application control signatures

Your goal is to deploy resources in multiple places and regions in the public cloud using Terraform. What is the most efficient way to deploy resources without changing much of the Terraform code?

• Use multiple terraform.tfvars files With a variables.tf file.
• Use the provider. tf file to add all the new values
• Install and configure two Terraform staging servers to deploy resources.
• Use the variable, tf file and edit its values to match multiple resources

What are two main features in Amazon Web Services (AWS) network access control lists (ACLs)? (Choose two.)

• You cannot use Network ACL and Security Group at the same time.
• The default network ACL is configured to allow all traffic
• NetworkACLs are stateless, and inbound and outbound rules are used for traffic filtering
• Network ACLs are tied to an instance