Fortinet NSE 7 - Public Cloud Security 6.4 - NSE7

QUESTION NO: 1
What is the bandwidth limitation of an Amazon Web Services (AWS) transit gateway VPC attachment?

A. Up to 1.25 Gbps per attachment B. Up to 10 Gbps per attachment C. Up to 1 Gbps per attachment D. Up to 50 Gbps per attachment

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Refer to the exhibit.

The exhibit shows a topology where multiple connections from clients to the same FortiGate-VM instance, regardless of the protocol being used, are required.
Which two statements are correct? (Choose two.)

A. The Cloud Load Balancer Session Affinity setting should be changed to CLIENT_IP. B. The design shows an active-active FortiGate-VM architecture. C. The design shows an active-passive FortiGate-VM architecture. D. The Cloud Load Balancer Session Affinity setting should use the default value.

Correct Answer: A,B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Refer to the exhibit.

A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Web servers to the Internet. The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface.
What are two possible reasons for this behavior? (Choose two.)

A. The web servers are not configured with the default gateway. B. AWS source and destination checks are enabled on the FortiGate interfaces. C. AWS security groups may be blocking the traffic. D. The Internet gateway (IGW) is not added to VPC (virtual private cloud).

Correct Answer: B,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Fortinet NSE 7 - Public Cloud Security 6.4 - NSE7_PBC-6.4 Exam Questions