Free Fortinet NSE7_PBC-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_PBC-7.2 exam questions and correct answers

Page: 1 / 12

Total 60 Questions | Updated On: Oct 21, 2023

Add To Cart

Question 1

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

A : The inside CIDR blocks are used for BGP peering

B : You cannot use IPv6 addresses

C : You must specify a /29CIDR block from the 169.254.0.0/16 range

D : You must configure the second address from the IPv4 range on the device as the BGP IP address

Answer: A,C

Question 2

You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table. Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?

A : Connect attachment

B : VPC attachment

C : Route attachment

D : GRE attachment

Answer: B

Question 3

Refer to the exhibit.

You are troubleshooting a FortiGate HA floating IP issue with Microsoft Azure. After the failover, the new primary device does not have the previous primary device floating IP address. What could be the possible issue With this scenario?

A : FortiGate port4 does not have internet access.

B : A wrong client secret credential is used

C : The error is caused by credential time expiration.

D : The Azure service principle account must have a contributor role.

Answer: D

Question 4

Refer to the exhibit

You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services (AWS). You examined the variables.tf file. What will be the final result after running the terraform init and terraform apply commands?

A : Terraform will not deploy a FortiGate VM

B : Terraform will deploy a FortiGate VM in the eu-West-Ia region with private and public subnets.

C : Terraform will deploy a FortiGate VM in the eu-West-1a region with two subnets and byol license.

D : Terraform will deploy a FortiGate VM in the eu-West-Ia region without any subnets.

Answer: B

Question 5

You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost Which solution meets the requirements?

A : Use FortiADC

B : Use FortiCNP

C : Use FortiWebCloud

D : Use FortiGate

Answer: C

Page: 1 / 12

Total 60 Questions | Updated On: Oct 21, 2023

Add To Cart