Online Access Free NSE7_PBC-7.2 Practice Test

Refer to the exhibit. You are deploying two FortiGate VMS in HA active-passive mode with load balancers in Microsoft Azure.

Which two statements are true in this load balancing scenario? (Choose two.)

• A.An internal load balancer listener is the next-hop for outgoing traffic.
• B.The FortiGate public IP is the next-hop for all the traffic.
• C.You must add a route to the Microsoft VIP used for the health check.
• D.A dedicated management interface can be used for load balancing.

You are adding more spoke VPCs to an existing hub and spoke topology. Your goal is to finish this task in the minimum amount of time without making errors.
Which Amazon AWS services must you subscribe to accomplish your goal?

• A.CloudWatch, S3
• B.GuardDuty, CloudWatch
• C.Inspector, S3
• D.WAF, DynamoDB

You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table.
Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?

• A.Connect attachment
• B.GRE attachment
• C.VPC attachment
• D.Route attachment

You must allow an SSH traffic rule in an Amazon Web Services (AWS) network access list (NACL) to allow SSH traffic to travel to a subnet for temporary testing purposes. When you review the current inbound network ACL rules, you notice that rule number 5 demes SSH and telnet traffic to the subnet What can you do to allow SSH traffic?

• A.You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.
• B.You must create a new allow SSH rule above rule number 5.
• C.You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.
• D.You must create a new allow SSH rule below rule number 5.

Which two Amazon Web Services (AWS) topologies support east-west traffic inspection within the AWS cloud by the FortiGate VM? (Choose two.)

• A.A multiple VPC deployment utilizing a transit VPC topology
• B.A single VPC deployment with multiple subnets
• C.A multiple VPC deployment utilizing a transit gateway
• D.A single VPC deployment with multiple subnets and a NAT gateway