Free Practice Fortinet NSE7_PBC-7.2 Exam Questions 2025

Stay ahead with 100% Free Fortinet NSE 7 - Public Cloud Security 7.2 NSE7_PBC-7.2 Dumps Practice Questions

Page: 1 / 12

Total 60 Questions | Updated On: Apr 24, 2025

Add To Cart

Question 1

You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table. Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?

A : Connect attachment

B : VPC attachment

C : Route attachment

D : GRE attachment

Answer: B

Question 2

You are asked to find a solution to replace the existing VPC peering topology to have a higher bandwidth connection from Amazon Web Services (AWS) to the on-premises data center Which two solutions will satisfy the requirement? (Choose two.)

A : Use ECMP and VPN to achieve higher bandwidth.

B : Use transit VPC to build multiple VPC connections to the on-premises data center

C : Use a transit VPC with hub and spoke topology to create multiple VPN connections to the on-premises data center

D : Use the transit gateway attachment With VPN option to create multiple VPN connections to the on-premises data center

Answer: C,D

Question 3

Refer to the exhibit

You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services (AWS). You examined the variables.tf file. What will be the final result after running the terraform init and terraform apply commands?

A : Terraform will not deploy a FortiGate VM

B : Terraform will deploy a FortiGate VM in the eu-West-Ia region with private and public subnets.

C : Terraform will deploy a FortiGate VM in the eu-West-1a region with two subnets and byol license.

D : Terraform will deploy a FortiGate VM in the eu-West-Ia region without any subnets.

Answer: B

Question 4

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

A : The inside CIDR blocks are used for BGP peering

B : You cannot use IPv6 addresses

C : You must specify a /29CIDR block from the 169.254.0.0/16 range

D : You must configure the second address from the IPv4 range on the device as the BGP IP address

Answer: A,C

Question 5

You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost Which solution meets the requirements?

A : Use FortiADC

B : Use FortiCNP

C : Use FortiWebCloud

D : Use FortiGate

Answer: C

Page: 1 / 12

Total 60 Questions | Updated On: Apr 24, 2025

Add To Cart