Fortinet NSE7_PBC-7.2 Exam Real Questions

Prepare and pass your Fortinet NSE 7 - Public Cloud Security 7.2 with free NSE7_PBC-7.2 exam questions.

Page: 1 / 12

Total 60 Questions | Updated On: Oct 24, 2024

Add To Cart

Question 1

You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table. Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?

A : Connect attachment

B : VPC attachment

C : Route attachment

D : GRE attachment

Answer: B

Question 2

Refer to Exhibit:

The exhibit shows the Connect Peers settings on Amazon Web Services (AWS) transit gateway attachments

With two FortiGate VMS in a security VPC.

Which two statements are correct? (Choose two.)

A : The peer GRE address is the FortiGate external interface IP address.

B : The Transit Gateway GRE address is auto-generated

C : The BGP inside CIDR blocks can be any CIDR block with /29

D : The Peer GRE address is the FortiGate internal interface IP address

Answer: A,B

Question 3

Refer to the exhibit.

You are troubleshooting a FortiGate HA floating IP issue with Microsoft Azure. After the failover, the new primary device does not have the previous primary device floating IP address. What could be the possible issue With this scenario?

A : FortiGate port4 does not have internet access.

B : A wrong client secret credential is used

C : The error is caused by credential time expiration.

D : The Azure service principle account must have a contributor role.

Answer: D

Question 4

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

A : The inside CIDR blocks are used for BGP peering

B : You cannot use IPv6 addresses

C : You must specify a /29CIDR block from the 169.254.0.0/16 range

D : You must configure the second address from the IPv4 range on the device as the BGP IP address

Answer: A,C

Question 5

You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost Which solution meets the requirements?

A : Use FortiADC

B : Use FortiCNP

C : Use FortiWebCloud

D : Use FortiGate

Answer: C

Page: 1 / 12

Total 60 Questions | Updated On: Oct 24, 2024

Add To Cart