Online Access Free NSE7_CDS_AR-7.6 Practice Test

Which statement about Transit Gateway (TGW) in Amazon Web Services (AWS) is true?

• A.TGW can have multiple TGW route tables.
• B.A TGW attachment can be associated with multiple TGW route tables.
• C.The TGW default route table cannot be disabled.
• D.Both the TGW attachment and propagation must be in the same TGW route table.

Refer to the exhibit. After analyzing the native monitoring tools available in Azure, an administrator decides to use the tool displayed in the exhibit.
Why would an administrator choose this tool?

• A.To view details about Azure resources and their relationships across multiple regions.
• B.To compare the latency of an on-premises site with the latency of an Azure application.
• C.To help debug issues affecting virtual network gateways.
• D.To obtain, and later examine, traffic flow data with a visualization tool.

As part of your organization's monitoring plan, you have been tasked with obtaining and analyzing detailed information about the traffic sourced at one of your FortiGate EC2 instances.
What can you do to achieve this goal?

• A.Use AWS CloudTrail to capture and then examine traffic from the EC2 instance.
• B.Create a virtual public cloud (VPC) flow log at the network interface level for the EC2 instance.
• C.Add the EC2 instance as a target in CloudWatch to collect its traffic logs.
• D.Configure a network access analyzer scope with the EC2 instance as a match finding.

You have deployed a FortiGate HA cluster in Azure using a Gateway Load Balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.
What can be the cause of the issue?

• A.The Fortinet VMs have IP forwarding disabled, which is required for traffic inspection.
• B.The health probes for the Gateway Load Balancer are failing, which causes traffic to bypass the HA cluster.
• C.The protected VMs are in a different Azure subscription, which prevents the Gateway Load Balancer from forwarding traffic.
• D.The Gateway Load Balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through.

A DevOps team is using Terraform to manage their infrastructure across multiple environments.
Currently, the Terraform state file is stored locally on a developer's machine. The team decides to migrate the state file to a remote back-end machine.
Why is storing the Terraform state file in a remote location considered a best practice in this scenario?

• A.It prevents the accidental deletion of the state file.
• B.It ensures that the state file is encrypted.
• C.It eliminates the need to define provider configurations in the state file.
• D.It enables collaboration among multiple team members.