Fortinet NSE7_PBC-7.2 問題集

質問 1：
Your goal is to deploy resources in multiple places and regions in the public cloud using Terraform. What is the most efficient way to deploy resources without changing much of the Terraform code?
A. Use the provider. tf file to add all the new values
B. Use the variable, tf file and edit its values to match multiple resources
C. Use multiple terraform.tfvars files With a variables.tf file.
D. Install and configure two Terraform staging servers to deploy resources.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Refer to the exhibit. You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS.

However, your connection is not successful.
Given the network topology, what can be the issue?
A. There is no elastic IP address attached to FortiGate in the Security VPC.
B. The Transit Gateway BGP IP address is incorrect.
C. There is no connection between VPC A and VPC B.
D. There is no internet gateway attached to the Spoke VPC A.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You are deploying Amazon Web Services (AWS) GuardDuty to monitor malicious or unauthorized behaviors related to AWS resources. You will also use the Fortinet aws-lambda-guardduty script to translate feeds from AWS GuardDuty findings into a list of malicious IP addresses. FortiGate can then consume this list as an external threat feed.
Which Amazon AWS services must you subscribe to in order to use this feature?
A. WAF, Shield, GuardDuty, S3, and DynamoDB.
B. Inspector, Shield, GuardDuty, S3, and DynamoDB.
C. GuardDuty, CloudWatch, S3, Inspector, WAF, and Shield.
D. GuardDuty, CloudWatch, S3, and DynamoDB.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Which statement about FortiSandbox in Amazon Web Services (AWS) is true?
A. FortiSandbox in AWS uses Windows virtual machines (VMs) to inspect files.
B. FortiSandbox in AWS can have a maximum of eight virtual machines (VMs) that inspect files.
C. In AWS, virtual machines (VMs) that inspect files do not have to be reset after inspecting a file.
D. In AWS, virtual machines (VMs) that inspect files are constantly up and running.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost.
Which solution meets the requirements?
A. Use FortiADC
B. Use FortiWebCloud
C. Use FortiCNP
D. Use FortiGate
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
You have been tasked with deploying FortiGate VMs in a highly available topology on the Amazon Web Services (AWS) cloud. The requirements for your deployment are as follows:
- You must deploy two FortiGate VMs in a single virtual private cloud (VPC), with an external elastic load balancer which will distribute ingress traffic from the internet to both FortiGate VMs in an active-active topology.
- Each FortiGate VM must have two elastic network interfaces: one will connect to a public subnet and other will connect to a private subnet.
- To maintain high availability, you must deploy the FortiGate VMs in two different availability zones.
How many public and private subnets will you need to configure within the VPC?
A. One public subnet and two private subnets
B. One public subnet and one private subnet
C. Two public subnets and two private subnets
D. Two public subnets and one private subnet
正解：C