100% Free Fortinet NSE7_CDS_AR-7.6 Practice Test Questions

Question 1

Refer to the exhibit.You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services(AWS). You examined the variables.tf file. Assume that all the other terraform files are in place. Whatwill be the final result after running the terraform init and terraform apply commands? (Choose oneanswer)

A : Terraform will not deploy a FortiGate VM.

B : Terraform will deploy a FortiGate VM in the eu-West-1a availability zone without any subnets.

C : Terraform will deploy a FortiGate VM in the eu-West-1 region with private and public subnets.

D : Terraform will deploy a FortiGate VM in the eu-West-1a availability zone with two subnets andBYOL license.

Answer: A

Question 2

As part of your organization's monitoring plan, you have been tasked with obtaining and analyzingdetailed information about the traffic sourced at one of your FortiGate EC2 instances.What can you do to achieve this goal?

A : Use AWS CloudTrail to capture and then examine traffic from the EC2 instance.

B : Create a virtual public cloud (VPC) flow log at the network interface level for the EC2 instance.

C : Add the EC2 instance as a target in CloudWatch to collect its traffic logs.

D : Configure a network access analyzer scope with the EC2 instance as a match finding.

Answer: B

Question 3

Refer to the exhibit.You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure.After the deployment, you prefer to use FGSP to synchronize sessions, and allow asymmetric returntraffic. In the environment, FortiGate port 1 and port 2 are facing external and internal load balancersrespectively.What IP address must you use in the peerip configuration?

A : The opposite FortiGate port 2 IP address.

B : The public load balancer port 2 IP address.

C : The internal load balancer port 1 IP address.

D : The opposite FortiGate port 1 IP address.

Answer: D

Question 4