Use NSE7_PBC-7.2 Dumps to Obtain Fortinet Certification

If you're serious about obtaining the NSE 7 Network Security Architect certification, practicing with Fortinet NSE7_PBC-7.2 dumps questions is a must. By doing so, you'll become familiar with the exam format, identify knowledge gaps, develop time management skills, boost your confidence, and increase your chances of success. So, start practicing NSE7_PBC-7.2 exam dumps today and give yourself the best chance of passing the NSE7_PBC-7.2 exam! Test free Fortinet NSE 7 Public Cloud Security 7.2 (FCSS) NSE7_PBC-7.2 exam dumps below.

Page 1 of 2

1. Refer to the exhibit





You are deploying two FortiGate VMS in HA active-passive mode with load balancers in Microsoft Azure

Which two statements are true in this load balancing scenario? (Choose two.)

The FortiGate public IP is the next-hop for all the traffic.

An internal load balancer listener is the next-hop for outgoing traffic.

You must add a route to the Microsoft VIP used for the health check.

A dedicated management interface can be used for load balancing.

 Loading...

2. What are three important steps required to get Terraform ready using Microsoft Azure Cloud Shell? (Choose three.)

Set up a storage account in Azure.

use the -O command to download Terraform.

Subscribe to Terraform in Azure.

Move the Terraform file to the bin directory.

Use the wget (te=aform vession) command to upload Terraform.

 Loading...

3. You are using Red Hat Ansible to change the FortiGate VM configuration.

What is the minimum number of files you must create and which file must you use to configure the target FortiGate IP address?

Create two files and use the .yami file.

Create two files and use the hosts file

Create one file and use the variable file

Create three files and use the .yarai file.

 Loading...

4. Your administrator instructed you to deploy an Azure vWAN solution to create a connection between the main company site and branch sites to the other company VNETs.

What are the two best connection solutions available between your company headquarters, branch sites, and the Azure vWAN hub? (Choose two.)

ExpressRoute

GRE tunnels

SSL VPN connections

An L2TP connection

VPN Gateway

 Loading...

5. Refer to the exhibit





You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS.

However, your connection is not successful.

Given the network topology, what can be the issue?

There is no connection between VPC A and VPC

There is no elastic IP address attached to FortiGate in the Security VP

The Transit Gateway BGP IP address is incorrect.

There is no internet gateway attached to the Spoke VPC

 Loading...

6. Refer to the exhibit





The exhibit shows the results of a FortiCNP registry scan

Which two statements are correct? (Choose two)

When adding a repository, you can leave the Tag section blank to scan all images-

The registry scan is part of the FortiCNP cloud protection.

The registry scan is part of the FortiCNP container protection.

When adding a repository, you can add a minimum number of images to be imported through the CAP section.

 Loading...

7. Refer to the exhibit.





The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers. There is no SDN connector used in this solution.

Which configuration should the administrator implement?

Lambda IP address with one static route.

Probe IP address with two static routes

Probe IP address with one BGP route

Public load balancer IP address with two BGP routes.

 Loading...

8. Refer to Exhibit:





You are troubleshooting a Microsoft Azure SDN connector issue on your FortiGate VM in Azure

Which three settings should you check while troubleshooting this problem? (Choose three.)

Use the show vdom command to see hidden VDOMs.

use the diag sys va command.

Ensure FortiGate port4 can resolve DN

Ensure FortiGate portl has internet access

Ensure IP address 169.254.169_254 is not blocked

 Loading...

9. Refer to Exhibit:





After the initial Terraform configuration in Microsoft Azure, the terraform plan command is run.

Which two statements about running the plan command are true? (Choose two.)

The terraform plan command will deploy the rest of the resources except the service principle details.

You cannot run the terraform apply command before the terraform plan command.

You must run the terraform init command once, before the terraform plan command

The terraform plan command makes terraform do a dry run.

 Loading...

10. Refer to the exhibit.





You are troubleshooting a FortiGate HA floating IP issue with Microsoft Azure. After the failover, the new primary device does not have the previous primary device floating IP address.

What could be the possible issue With this scenario?

FortiGate port4 does not have internet access.

A wrong client secret credential is used

The error is caused by credential time expiration.

The Azure service principle account must have a contributor role.

 Loading...

Page 2 of 2

11. When adding the Amazon Web Services (AWS) account to the FortiCNP, which three mandatory configuration steps must you follow? (Choose three.)

Add AWS accounts through FortiCN

Enable cloud protection through AWS Guard Duty and AWS Inspector

Accept FortiCNP to create CloudTrail for the account

Enable cross-reg Ion aggregation

Launch the CloudFormation template.

 Loading...

12. You must allow an SSH traffic rule in an Amazon Web Services (AWS) network access list (NACL) to allow SSH traffic to travel to a subnet for temporary testing purposes. When you review the current inbound network ACL rules, you notice that rule number 5 demes SSH and telnet traffic to the subnet.

What can you do to allow SSH traffic?

You must create a new allow SSH rule below rule number 5

You must create a new allow SSH rule above rule number 5-

You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.

You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.

 Loading...

13. How does an administrator secure container environments from newly emerged security threats?

Use distributed network-related application control signatures.

Use Amazon AWS-related application control signatures

Use Amazon AWS_S3-related application control signatures

Use Docker-related application control signatures

 Loading...

14. Refer to the exhibit.





What would be the impact of confirming to delete all the resources in Terraform?

It destroys all the resources in the . tfvars file

It destroys all the resources tied to the AWS Identity and Access Management (1AM) user.

It destroys all the resources in the resource group

It destroys all the resources in the state file.

 Loading...

15. Refer to Exhibit:





The exhibit shows the Connect Peers settings on Amazon Web Services (AWS) transit gateway attachments With two FortiGate VMS in a security VPC.

Which two statements are correct? (Choose two.)

The peer GRE address is the FortiGate external interface IP address.

The Transit Gateway GRE address is auto-generated

The BGP inside CIDR blocks can be any CIDR block with /29

The Peer GRE address is the FortiGate internal interface IP address

 Loading...

16. Refer to the exhibit.





You are configuring a second route table on a Transit Gateway to accommodate east-west traffic inspection between two VPCs_ However, you are getting an error during the transit gateway route table association With the Connect attachment.

Which action Should you take to fulfill your requirement?

Add both Associations and Propagations in the second TGW route table.

Delete the both Connect and Transport attachments from the first TGW route table

Add a static route in the Routes section

In the second route table: create a propagation with the Connect attachment.

 Loading...

17. You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table.

Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?

Connect attachment

VPC attachment

Route attachment

GRE attachment

 Loading...

18. Refer to the exhibit.





You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure. After the deployment, you prefer to use FGSP to synchronize sessions, and allow asymmetric return traffic. In the environment, FortiGate port 1 and port 2 are facing external and internal load balancers respectively

What IP address must you use in the peerip configuration?

The opposite FortiGate port 1 IP address.

The public load balancer port 2 IP address

The internal load balancer port 1 IP address.

The opposite FortiGate port 2 IP address.

 Loading...

 Loading...