NSE7_CDS_AR-7.6 by Fortinet Actual Free Exam Questions And Answers

Question 1

Which statement about Transit Gateway (TGW) in Amazon Web Services (AWS) is true?

A. The TGW default route table cannot be disabled.

B. TGW can have multiple TGW route tables.

C. Both the TGW attachment and propagation must be in the same TGW route table.

D. A TGW attachment can be associated with multiple TGW route tables.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

An administrator is planning to use FortiDevSec to detect vulnerabilities in container images and is researching any platform limitations that they must take into account when using that tool. What is a limitation of FortiDevSec container security scanning?

A. It can detect vulnerabilities in containerized applications in Amazon Web Services (AWS) environments only.

B. It focuses on scanning for encrypted secrets in containerized applications.

C. It does not support scanning private images that require Docker login.

D. It is limited to dynamic application testing of container images.

Discussion 0

Correct Answer: C Vote an answer

Question 3

Refer to the exhibit. What is the purpose of this section of an Azure Bicep file?

A. To add a comment with the permitted FortiOS versions that can be deployed

B. To indicate the correct FortiOS upgrade path after deployment

C. To document the FortiOS versions in the resulting topology

D. To restrict which FortiOS versions are accepted for deployment

Discussion 0

Correct Answer: D Vote an answer

Question 4

An administrator is trying to implement FortiCNP with Microsoft Azure Security integration.
However, FortiCNP is not able to extract any cloud integration data from Azure; therefore, real- time cloud security monitoring is not possible.
What is causing this issue?

A. The administrator enabled the wrong Defender plan for servers.

B. The Azure account doesn't have the Global Administrator role.

C. The organization is using a free Azure AD license.

D. The FortiCNP account in Azure has the Storage Blob Data Reader role.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit. A team of AWS administrators is in the process of installing a FortiWeb ingress controller to protect containerized web applications in an Amazon Elastic Kubernetes Service (EKS) cluster. While customizing the manifest file in the image, they realize that they do not know the correct value to enter in the fortiweb-loginfield.
How can they determine he correct value for this field?

A. They can find the expected value in the manifest file used to deploy the pods.

B. They can refer to the output of the EKS cluster deployment.

C. The correct value is the password of the FortiWeb admin account.

D. They must create a Kubernetes secret with the kubectlcommand.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit. An administrator deployed an HA active-active load balance sandwich in Microsoft Azure. The setup requires configuration synchronization between devices.
What can you conclude from the configured settings shown in the exhibit? (Choose two.)

A. FortiGate-VM instances are scaled out automatically according to predefined workload levels.

B. FortiGate A and FortiGate B are two independent devices.

C. It does not synchronize the FortiGate hostname.

D. By default, FortiGate uses FGCP.

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Which two statements about the Amazon Web Services (AWS) security groups are true?
(Choose two.)

A. Security groups are applicable at the instance level.

B. EC2 instances, elastic network interfaces (ENIs), and subnets may have security groups configured on them.

C. A security group is a stateful list of ingress and egress traffic rules.

D. Configured traffic rules may have an action of allow or deny.

Discussion 0

Correct Answer: A,C Vote an answer

Question 8

Refer to the exhibit. You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS. However, your connection is not successful.
Given the network topology, what can be the issue?

A. The Transit Gateway BGP IP address is incorrect.

B. There is no Internet Gateway attached to the Spoke VPC A.

C. There is no connection between VPC A and VPC B.

D. There is no Elastic IP address attached to FortiGate in the Security VPC.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Fortinet NSE 7 - Public Cloud Security 7.6 Architect - NSE7_CDS_AR-7.6 Exam Practice Test

Contact Us

Useful Links

Latest Updated