Question 1

You are asked to find a solution to replace the existing VPC peering topology to have a higher bandwidth connection from Amazon Web Services (AWS) to the on-premises data center Which two solutions will satisfy the requirement? (Choose two.)

Options :

A : Use ECMP and VPN to achieve higher bandwidth.

B : Use transit VPC to build multiple VPC connections to the on-premises data center

C :

Use a transit VPC with hub and spoke topology to create multiple VPN connections to the on-premises data center

D :

Use the transit gateway attachment With VPN option to create multiple VPN connections to the on-premises data center

Answer: C,D

Question 2

You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost Which solution meets the requirements?

Options :

A : Use FortiADC

B : Use FortiCNP

C : Use FortiWebCloud

D : Use FortiGate

Answer: C

Question 3

You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table. Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?

Options :

A : Connect attachment

B : VPC attachment

C : Route attachment

D : GRE attachment

Answer: B

Question 4

Refer to Exhibit:

The exhibit shows the Connect Peers settings on Amazon Web Services (AWS) transit gateway attachments

With two FortiGate VMS in a security VPC.

Which two statements are correct? (Choose two.)

Options :

A : The peer GRE address is the FortiGate external interface IP address.

B : The Transit Gateway GRE address is auto-generated

C : The BGP inside CIDR blocks can be any CIDR block with /29

D : The Peer GRE address is the FortiGate internal interface IP address

Answer: A,B

Question 5

Refer to Exhibit:

You are troubleshooting a Microsoft Azure SDN connector issue on your FortiGate VM in Azure Which three settings should you check while troubleshooting this problem? (Choose three.)

Options :

A : Use the show vdom command to see hidden VDOMs.

B : use the diag sys va command.

C : Ensure FortiGate port4 can resolve DNS.

D : Ensure FortiGate portl has internet access

E : Ensure IP address 169.254.169_254 is not blocked

Answer: C,D,E

Smartly Prepare Exam with Free Online NSE7_PBC-7.2 Practice Test

Buying Options: