Free Fortinet NSE7_PBC-7.2 Exam Questions

Become Fortinet Certified with updated NSE7_PBC-7.2 exam questions and correct answers

Page: 1 / 12

Total 60 Questions | Updated On: Jan 10, 2025

Add To Cart

Question 1

Refer to Exhibit:

The exhibit shows the Connect Peers settings on Amazon Web Services (AWS) transit gateway attachments

With two FortiGate VMS in a security VPC.

Which two statements are correct? (Choose two.)

A : The peer GRE address is the FortiGate external interface IP address.

B : The Transit Gateway GRE address is auto-generated

C : The BGP inside CIDR blocks can be any CIDR block with /29

D : The Peer GRE address is the FortiGate internal interface IP address

Answer: A,B

Question 2

Refer to the exhibit

You are tasked with deploying a webserver and FortiGate VMS in AWS_ You are using Terraform to automate the process Which two important details should you know about the Terraform files? (Choose two.)

A : All the output values are available after a successful terraform apply command

B : The subnet_private 1 value is defined in the variables . tf file

C : After the deployment, Terraform output values are visible only through AWS CloudShell.

D : You must specify all the AWS credentials in the output. of file.

Answer: A,B

Question 3

You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost Which solution meets the requirements?

A : Use FortiADC

B : Use FortiCNP

C : Use FortiWebCloud

D : Use FortiGate

Answer: C

Question 4

You are asked to find a solution to replace the existing VPC peering topology to have a higher bandwidth connection from Amazon Web Services (AWS) to the on-premises data center Which two solutions will satisfy the requirement? (Choose two.)

A : Use ECMP and VPN to achieve higher bandwidth.

B : Use transit VPC to build multiple VPC connections to the on-premises data center

C : Use a transit VPC with hub and spoke topology to create multiple VPN connections to the on-premises data center

D : Use the transit gateway attachment With VPN option to create multiple VPN connections to the on-premises data center

Answer: C,D

Question 5

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

A : The inside CIDR blocks are used for BGP peering

B : You cannot use IPv6 addresses

C : You must specify a /29CIDR block from the 169.254.0.0/16 range

D : You must configure the second address from the IPv4 range on the device as the BGP IP address

Answer: A,C

Page: 1 / 12

Total 60 Questions | Updated On: Jan 10, 2025

Add To Cart