Download Fortinet.NSE7_PBC-7.2.VCEplus.2023-11-28.16q.tqb
| Vendor: | Fortinet |
| Exam Code: | NSE7_PBC-7.2 |
| Exam Name: | Fortinet NSE 7 Public Cloud Security 7.2 (FCSS) |
| Date: | Nov 28, 2023 |
| File Size: | 1 MB |
Demo Questions
Question 1
Refer to the exhibit.
A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Web servers to the Internet. The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface.
What are two possible reasons for this behavior? (Choose two.)
- The web servers are not configured with the default gateway.
- The Internet gateway (IGW) is not added to VPC (virtual private cloud).
- AWS source and destination checks are enabled on the FortiGate interfaces.
- AWS security groups may be blocking the traffic.
Correct answer: CD
Explanation:
You need to check if source/destination are enabled. Public_Cloud_6.4_Study_Guide Page 67 You need to check if source/destination are enabled. Public_Cloud_6.4_Study_Guide Page 67
Question 2
Refer to the exhibit.
Your senior administrator successfully configured a FortiGate fabric connector with the Azure resource manager, and created a dynamic address object on the FortiGate VM to connect with a windows server in Microsoft Azure. However, there is now an error on the dynamic address object, and you must resolve the issue.
How do you resolve this issue?
- Run diagnose debug application azd -l on FortiGate.
- In the Microsoft Azure portal, set the correct tag values for the windows server.
- In the Microsoft Azure portal, access the windows server, obtain the private IP address, and assign the IP address under the FortiGate-VM AzureLab address object.
- Delete the address object and recreate a new address object with the type set to FQDN.
Correct answer: B
Explanation:
https://docs.fortinet.com/document/fortigate-public-cloud/6.2.0/azure-administration-guide/985498/troubleshooting-azure-fabric-connector https://docs.fortinet.com/document/fortigate-public-cloud/6.2.0/azure-administration-guide/985498/troubleshooting-azure-fabric-connector
Question 3
Refer to the exhibit.
You are deploying a FortiGate-VM in Microsoft Azure using the PAYG/On-demand licensing model. After you configure the FortiGate-VM, the validation process fails, displaying the error shown in the exhibit.
What caused the validation process to fail?
- You selected the incorrect resource group.
- You selected the Bring Your Own License (BYOL) licensing mode.
- You selected the PAYG/On-demand licensing model, but did not select correct virtual machine size.
- You selected the PAYG/On-demand licensing model, but did not associate a valid Azure subscription.
Correct answer: D
Explanation:
https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-setup-guide/organize-resources https://docs.microsoft.com/en-us/azure/cloud-adoption-framework/ready/azure-setup-guide/organize-resources
