Fortinet NSE7_CDS_AR-7.6 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
Reference: https://training.fortinet.com/local/staticpage/view.php?page=public_cloud_security_architect_exam
Fortinet NSE 7 - Public Cloud Security 7.6 Architect Sample Questions:
Question #1
Which statement about Transit Gateway (TGW) in Amazon Web Services (AWS) is true?
A. The TGW default route table cannot be disabled.
B. A TGW attachment can be associated with multiple TGW route tables.
C. TGW can have multiple TGW route tables.
D. Both the TGW attachment and propagation must be in the same TGW route table.
Question #2
A Network security administrator is searching for a solution to secure traffic going in and out of the container infrastructure.
In which two ways can Fortinet container security help secure container infrastructures? (Choose two.)
A. FortiGate NGFW can inspect north-south container traffic with label aware policies.
B. FortiGate NGFW can connect to the worker nodes and protect the containers.
C. FortiGate NGFW and FortiWeb can be used to secure container traffic.
D. FortiGate NGFW can be placed between each application container for north-south traffic inspection.
Question #3
Refer to the exhibit.
In your Amazon Web Services (AWS), you must allow inbound HTTPS access to the Customer VPC FortiGate VM from the internet. However, your HTTPS connection to the FortiGate VM in the Customer VPC is not successful.
Also, you must ensure that the Customer VPC FortiGate VM sends all the outbound Internet traffic through the Security VPC.
How do you correct this issue with minimal configuration changes? (Choose three.)
A. Add a route to the destination 0.0.0.0/0 with the transit gateway as the target.
B. Deploy an internet gateway, attach it to the Customer VPC, and then associate an EIP with the port1 of the FortiGate in the Customer VPC.
C. Add a route with your local internet public IP address as the destination and the transit gateway as the target.
D. Add a route with your local internet public IP address as the destination and the internet gateway as the target.
E. Deploy an internet gateway, associate an EIP with the Customer VPC private subnet, and then add a new route with destination 0.0.0.0/0 with the internet gateway as the target.
Question #4
You have onboarded the organization's Microsoft Azure account on FortiCNAPP using the automated configuration approach. However, FortiCNAPP does not appear to be receiving any workload scanning data.
How can you remedy this? (Choose one answer)
A. Add a FortiCNAPP threat policy to monitor Azure workloads.
B. Add a service principal in the Azure Cloud Shell.
C. Add a new Azure App Registration.
D. Add the appropriate integration type using the guided configuration.
Question #5
You are using Ansible to modify the configuration of several FortiGate VMs. What is the minimum number of files you need to create, and in which file should you configure the target FortiGate IP addresses?
A. One .yaml file with the targets IP addresses, and one playbook file with the tasks.
B. One playbook file for each target and the required tasks, and one inventory file.
C. One inventory file for each target device, and one playbook file.
D. One text file for all target devices, and one playbook file.
Solutions:
| Question #1 Correct Answer: C | Question #2 Correct Answer: A,C | Question #3 Correct Answer: A,B,C | Question #4 Correct Answer: D | Question #5 Correct Answer: D |
1533 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
