Fortinet NSE 7 - Public Cloud Security 7.6 Architect - NSE7_CDS

QUESTION NO: 1
What would be the impact of confirming to delete all the resources in Terraform?

A. It destroys all the resources in the .tfvars file. B. It destroys all the resources in the resource group. C. It destroys all the resources tied to the AWS Identity and Access Management (IAM) user. D. It destroys all the resources in the .tfstate file.

Correct Answer: D

QUESTION NO: 2
Refer to the exhibit.

An AWS administrator created a change set to examine the effects of proposed changes to the current infrastructure.
Based only on the output shown in the exhibit, what will happen if the administrator applies these changes?

A. The PhysicalResourceId will remain the same. B. CloudFormation will roll back the current stack before updating it. C. The resulting FortiGate instance will lose its current local users. D. The deployment will take place without any service interruption.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Refer to the exhibit.

A managed security service provider (MSSP) administration team is trying to deploy a new HA cluster in Azure to filter traffic to and from a client that is also using Azure. However, every deployment attempt fails, and only some of the resources are deployed successfully. While troubleshooting this issue, the team runs the command shown in the exhibit.
What are the implications of the output of the command?

A. The team will not be able to deploy an active-passive (A-P) FortiGate high availability (HA) cluster with SDN connector. B. The team will not be able to deploy an A-P FortiGate HA cluster with Azure gateway load balancer. C. The team will not be able to deploy an A-P FortiGate HA cluster with Azure load balancer. D. The team will not be able to deploy an active-active (A-P) FortiGate HA cluster with Azure load balancer.

Correct Answer: D

QUESTION NO: 4
An administrator is looking for a solution that can provide insight into users and data stored in major SaaS applications in the multicloud environment. Which product should the administrator deploy to have secure access to SaaS applications? (Choose one answer)

A. FortiSIEM B. FortiSandbox C. FortiWeb D. FortiCASB

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
In an SD-WAN TGW Connect topology, which three initial steps are mandatory when routing traffic from a spoke VPC to a security VPC through a Transit Gateway? (Choose three.)

A. From the security VPC TGW subnet routing table, point 0.0.0.0/0 traffic to the TGW. B. From the security VPC FortiGate internal subnet routing table, point 0.0.0.0/0 traffic to the TGW. C. From both spoke VPCs, and the security VPC, point 0.0.0.0/0 traffic to the Internet Gateway. D. From the security VPC TGW subnet routing table, point 0.0.0.0/0 traffic to the FortiGate internal port. E. From the spoke VPC internal routing table, point 0.0.0.0/0 traffic to the TGW.

Correct Answer: B,D,E

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
Refer to the exhibit.

Consider the active-active load balance sandwich scenario in Microsoft Azure.
What are two important facts in the active-active load balance sandwich scenario? (Choose two.)

A. It is recommended to enable NAT on FortiGate policies. B. It uses the FGCP protocol for session synchronization by default. C. It supports session synchronization for handling asymmetric traffic. D. It uses the vdom-exception command to exclude the configuration from being synchronized by default.

Correct Answer: A,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.
What is an advantage of choosing Azure Bicep over other IaC tools available?

A. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates. B. Azure Bicep provides immediate support for all Azure services, including those in preview. C. Azure Bicep generates deployment logs that are optimized to improve error handling. D. Azure Bicep can reduce deployment costs by limiting resource utilization during testing.

Correct Answer: B

Fortinet NSE 7 - Public Cloud Security 7.6 Architect - NSE7_CDS_AR-7.6 Exam Questions