Which statement about immutable infrastructure in automation is true?

It is the practice of deploying a new server for every configuration change

It is the practice of modifying the existing server configuration after it is deployed

It is the practice of deploying two parallel servers for high availability.

It is the practice of applying hotfixes and OS patches after deployment

Refer to the exhibit. What would be the impact of confirming to delete all the resources in Terraform?

It destroys all the resources in the state file.

It destroys all the resources in the . tfvars file

It destroys all the resources tied to the AWS Identity and Access Management (1AM) user.

It destroys all the resources in the resource group

It destroys all the resources in the state file.

Refer to the exhibit. An administrator has deployed a FortiGate VM in Amazon Web Services (AWS) and is trying to access it using its public IP address from their local computer However, the connection is not successful and at the same time FortiGate is not receiving any HTTPS or SSH traffic to its external interfaceWhat should the administrator check for possible issue?

Check the inbound network security group rules

Run a debug flow to check any network ACLs

Check the FortiGate firewall policies

Check the FortiGate instance ID

Check the inbound network security group rules

Your goal is to deploy resources in multiple places and regions in the public cloud using Terraform.What is the most efficient way to deploy resources without changing much of the Terraform code?

Use multiple terraform.tfvars files With a variables.tf file.

Use the provider. tf file to add all the new values

Install and configure two Terraform staging servers to deploy resources.

Use the variable, tf file and edit its values to match multiple resources

You are using Red Hat Ansible to change the FortiGate VM configuration.What is the minimum number of files you must create and which file must you use to configure the target FortiGate IP address?

Create two files and use the hosts file

Create two files and use the .yami file.

Create two files and use the hosts file

Create one file and use the variable file

Create three files and use the .yarai file.

Refer to the exhibit. You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure.After the deployment, you prefer to use FGSP to synchronize sessions, and allow asymmetric return traffic In the environment, FortiGate port 1 and port 2 are facing external and internal load balancers respectivelyWhat IP address must you use in the peerip configuration?

The opposite FortiGate port 2 IP address.

The opposite FortiGate port 1 IP address.

The public load balancer port 2 IP address

The internal load balancer port 1 IP address.

The opposite FortiGate port 2 IP address.

Refer to the exhibit. What value or values must the administrator use in the SSH Key section to deploy a FortiGate VM using Terraform in Amazon Web Services (AWS)?

Use the Name and ID values of the key pair

Use the ID value of the key pair.

Use the Fingerprint value of the key pair

An administrator decides to use the Use managed identity option on the FortiGate SDN connector with Microsoft Azure However, the SDN connector is failing on the connection What must the administrator do to correct this issue?

Make sure to enable the system assigned managed identity on Azure

Make sure to add the Tenant ID on FortiGate side of the configuration

Make sure to set the type to system managed identity on FortiGate SDN connector settings

Make sure to enable the system assigned managed identity on Azure

Make sure to add the Client secret on FortiGate side of the configuration

An administrator would like to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware. Which Fortinet product or feature should the administrator use?

FortiCNP application control policies

FortiCNP compliance scanning policies

How does an administrator secure container environments from newly emerged security threats?

Use Docker-related application control signatures

Use distributed network-related application control signatures.

Use Amazon AWS-related application control signatures

Use Amazon AWS_S3-related application control signatures

Use Docker-related application control signatures

What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD-WAN?

You can use GRE-based tunnel attachments

You can combine it with IPsec to achieve higher bandwidth

You can use BGP over IPsec for maximum throughput

What kind of underlying mechanism does Transit Gateway Connect use to send traffic from the virtual private cloud (VPC) to the transit gateway?

Transit Gateway Connect attachment

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

The inside CIDR blocks are used for BGP peering

You must specify a /29CIDR block from the 169.254.0.0/16 range

The inside CIDR blocks are used for BGP peering

You must specify a /29CIDR block from the 169.254.0.0/16 range

You must configure the second address from the IPv4 range on the device as the BGP IP address

In an SD-WAN TGW Connect topology, which three initial steps are mandatory when routing traffic from a spoke VPC to a security VPC through a Transit Gateway? (Choose three.)

From the spoke VPC internal routing table, point 0.0.0.0/0 traffic to the TGW

From the security VPC TGW subnet routing table: point 0.0.0.0/0 traffic to the FortiGate internal port

From the security VPC FortiGate internal subnet routing table, point 0.0.0.0/0 traffic to the TGW

From the spoke VPC internal routing table, point 0.0.0.0/0 traffic to the TGW

From the security VPC TGW subnet routing table: point 0.0.0.0/0 traffic to the FortiGate internal port

From the security VPC TGW subnet routing table: point 0.0.0.0/0 traffic to the TGW

From the security VPC FortiGate internal subnet routing table, point 0.0.0.0/0 traffic to the TGW

From both spoke VPCs and the security VPC, point 0.0.0.0/0 traffic to the Internet Gateway

Refer to the exhibit. You have deployed a Linux EC2 instance in Amazon Web Services (AWS) with the settings shown on the exhibitWhat next step must the administrator take to access this instance from the internet?

Allocate an Elastic IP address and assign it to the instance

Configure the user name and password.

Enable source and destination checks on the instance

Enable SSH and allocate it to the device

Allocate an Elastic IP address and assign it to the instance

Refer to the exhibit. What could be the reason that the administrator cannot access the EC2 instance?

The directory location of the . pem file is incorrect.

You must elevate the permissions to access the EC2 instance

You must run the chmod 400 Staging-key.peracommand before accessing the instance.

There is no . pem key created on in Amazon Web Services (AWS)

The directory location of the . pem file is incorrect.

Fortinet NSE7_PBC-7.2 Practice Test 2 - Free Online Exam Questions 41-59

Spam

Selling illegal goods, money scams etc.

Hate Speech

Serious attack on a group.

Harassment and bullying

Harassing an individual (including doxing)

Harmful activities

Threatening or glorifying violence or serious harm, including self-harm

Adult content (Consensual)

Nudity/Sexual content

Sexual exploitation and abuse (child safety)

Sexually explicit or suggestive imagery or writing involving minors

Sexual exploitation and abuse (adults and animals)

Sexually explicit or suggestive imagery or writing involving non-consenting adults or non-humans

Plagiarism

Reusing content without attribution (link and blockquotes)

Poorly written

Not in English or has very bad formatting, grammar, and spelling

Inappropriate credential

Author's credential is offensive, spam, or impersonation

Other

Ex. Illegal content, incomplete question...

Fortinet NSE7_PBC-7.2 Practice Test 2

Question

Fortinet NSE7_PBC-7.2 Practice Tests

Practice Tests