Question 1

Refer to the exhibit.An administrator used the what-if tool to preview changes to an Azure Bicep file.What will happen if the administrator decides to apply these changes in Azure?

Options :

A : Subnet 10.0.1.0 will replace subnet 10.0.2.0.

B : This deployment will fail and no changes will be applied.

C : A new subnet will be added to ServerApps.

D : The ServerApps VNet will be renamed.

Answer: B

Question 2

Refer to the exhibit.You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure.After the deployment, you prefer to use FGSP to synchronize sessions, and allow asymmetric returntraffic. In the environment, FortiGate port 1 and port 2 are facing external and internal load balancersrespectively.What IP address must you use in the peerip configuration?

Options :

A : The opposite FortiGate port 2 IP address.

B : The public load balancer port 2 IP address.

C : The internal load balancer port 1 IP address.

D : The opposite FortiGate port 1 IP address.

Answer: D

Question 3

Refer to the exhibit. your Amazon Web Services (AWS), you must allow inbound HTTPS access to the Customer VPCFortiGate VM from the internet. However, your HTTPS connection to the FortiGate VM in theCustomer VPC is not successful.Also, you must ensure that the Customer VPC FortiGate VM sends all the outbound Internet trafficthrough the Security VPC.How do you correct this issue with minimal configuration changes? (Choose three.)

Options :

A : Add a route with your local internet public IP address as the destination and the internet gatewayas the target.

B : Add a route with your local internet public IP address as the destination and the transit gateway asthe target.

C : Add a route to the destination 0.0.0.0/0 with the transit gateway as the target.

D : Deploy an internet gateway, associate an EIP with the Customer VPC private subnet, and then adda new route with destination 0.0.0.0/0 with the internet gateway as the target.

E : Deploy an internet gateway, attach it to the Customer VPC, and then associate an EIP with the port1 of the FortiGate in the Customer VPC.

Answer: B,C,E

Question 4

As part of your organization's monitoring plan, you have been tasked with obtaining and analyzingdetailed information about the traffic sourced at one of your FortiGate EC2 instances.What can you do to achieve this goal?

Options :

A : Use AWS CloudTrail to capture and then examine traffic from the EC2 instance.

B : Create a virtual public cloud (VPC) flow log at the network interface level for the EC2 instance.

C : Add the EC2 instance as a target in CloudWatch to collect its traffic logs.

D : Configure a network access analyzer scope with the EC2 instance as a match finding.

Answer: B

Question 5

Refer to the exhibit.You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services(AWS). You examined the variables.tf file. Assume that all the other terraform files are in place. Whatwill be the final result after running the terraform init and terraform apply commands? (Choose oneanswer)

Options :

A : Terraform will not deploy a FortiGate VM.

B : Terraform will deploy a FortiGate VM in the eu-West-1a availability zone without any subnets.

C : Terraform will deploy a FortiGate VM in the eu-West-1 region with private and public subnets.

D : Terraform will deploy a FortiGate VM in the eu-West-1a availability zone with two subnets andBYOL license.

Answer: A

Free NSE7_CDS_AR-7.6 Mock Exam – Practice Online Confidently

Buying Options: