Fortinet NSE7_PBC-7.2 問題集

質問 1：
Refer to the exhibit. The exhibit shows a topology where multiple connections from clients to the same FortiGate-VM instance, regardless of the protocol being used, are required.

Which two statements are correct? (Choose two.)
A. The design shows an active-active FortiGate-VM architecture.
B. The Cloud Load Balancer Session Affinity setting should be changed to CLIENT_IP.
C. The design shows an active-passive FortiGate-VM architecture.
D. The Cloud Load Balancer Session Affinity setting should use the default value.
正解：A,B

質問 2：
Refer to Exhibit. The exhibit shows the Connect Peers settings on Amazon Web Services (AWS) transit gateway attachments with two FortiGate VMS in a security VPC.

Which two statements are correct? (Choose two.)
A. The peer GRE address is the FortiGate external interface IP address.
B. The BGP inside CIDR blocks can be any CIDR block with /29
C. The Transit Gateway GRE address is auto-generated
D. The Peer GRE address is the FortiGate internal interface IP address
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which two statements about Microsoft Azure network security groups are true? (Choose two.)
A. Network security groups can be applied to subnets only.
B. Network security groups can be applied to subnets and virtual network interfaces.
C. Network security groups are stateless inbound and outbound rules used for traffic filtering.
D. Network security groups are a stateful inbound and outbound rules used for traffic filtering.
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Refer to the exhibit. You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS.

However, your connection is not successful.
Given the network topology, what can be the issue?
A. There is no elastic IP address attached to FortiGate in the Security VPC.
B. The Transit Gateway BGP IP address is incorrect.
C. There is no connection between VPC A and VPC B.
D. There is no internet gateway attached to the Spoke VPC A.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
You need to deploy FortiGate VM devices in a highly available topology in the Microsoft Azure cloud. The following are the requirements of your deployment:
- Two FortiGate devices must be deployed; each in a different availability zone.
- Each FortiGate requires two virtual network interfaces: one will connect to a public subnet and the other will connect to a private subnet.
- An external Microsoft Azure load balancer will distribute ingress traffic to both FortiGate devices in an active- active topology.
- An internal Microsoft Azure load balancer will distribute egress traffic from protected virtual machines to both FortiGate devices in an active-active topology.
- Traffic should be accepted or denied by a firewall policy in the same way by either FortiGate device in this topology.
Which FortiOS CLI configuration can help reduce the administrative effort required to maintain the FortiGate devices, by synchronizing firewall policy and object configuration between the FortiGate devices?
A. config system ha
B. config system session-sync
C. config system auto-scale
D. config system sdn-connector
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which statement about immutable infrastructure in automation is true?
A. It is the practice of deploying two parallel servers for high availability.
B. It is the practice of deploying a new server for every configuration change
C. It is the practice of applying hotfixes and OS patches after deployment
D. It is the practice of modifying the existing server configuration after it is deployed
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibit. What would be the impact of confirming to delete all the resources in Terraform?

A. It destroys all the resources in the resource group
B. It destroys all the resources tied to the AWS Identity and Access Management (1AM) user.
C. It destroys all the resources in the state file.
D. It destroys all the resources in the . tfvars file
正解：C
解説: (Topexam メンバーにのみ表示されます)