Fortinet NSE7_PBC-7.2 問題集

質問 1：
Which two Amazon Web Services (AWS) features support east-west traffic inspection within the AWS cloud by the FortiGate VM? (Choose two.)
A. A transit VPC
B. A NAT gateway with an EIP
C. An Internet gateway with an EIP
D. A transit gateway with an attachment
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Refer to the exhibit. The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers. There is no SDN connector used in this solution Which configuration should the administrator implement?

A. Public load balancer IP address with two BGP routes.
B. Probe IP address with two static routes
C. Lambda IP address with one static route.
D. Probe IP address with one BGP route
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You must allow an SSH traffic rule in an Amazon Web Services (AWS) network access list (NACL) to allow SSH traffic to travel to a subnet for temporary testing purposes. When you review the current inbound network ACL rules, you notice that rule number 5 demes SSH and telnet traffic to the subnet What can you do to allow SSH traffic?
A. You must create a new allow SSH rule below rule number 5.
B. You must create a new allow SSH rule above rule number 5.
C. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.
D. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Refer to the exhibit. You have deployed a Linux EC2 instance in Amazon Web Services (AWS) with the settings shown on the exhibit What next step must the administrator take to access this instance from the internet?

A. Configure the user name and password.
B. Allocate an Elastic IP address and assign it to the instance
C. Enable SSH and allocate it to the device
D. Enable source and destination checks on the instance
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit. You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS.

However, your connection is not successful.
Given the network topology, what can be the issue?
A. There is no elastic IP address attached to FortiGate in the Security VPC.
B. The Transit Gateway BGP IP address is incorrect.
C. There is no connection between VPC A and VPC B.
D. There is no internet gateway attached to the Spoke VPC A.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An Amazon Web Services (AWS) auto-scale FortiGate cluster has just experienced a scale-down event, terminating a FortiGate in availability zone C.
This has now black-holed the private subnet in this availability zone.
What action will the worker node automatically perform to restore access to the black-holed subnet?
A. The worker node moves the virtual IP of the terminated FortiGate to a running FortiGate on the worker node's private subnet interface.
B. The worker node modifies the route table applied to the black-holed subnet changing its default route to point to a running FortiGate on the worker node's private subnet interface.
C. The worker node migrates the subnet to a different availability zone.
D. The worker node applies a route table from a non-black-holed subnet to the black-holed subnet.
正解：B