Name: Fortinet NSE 7 - Public Cloud Security 6.4
Brand: ValidExamDumps
SKU: NSE7_PBC-6.4
Price: 20 USD
Availability: InStock
Rating: 4.8 (148 reviews)

Free Fortinet NSE7_PBC-6.4 Exam Actual Questions

The questions for NSE7_PBC-6.4 were last updated On Feb 18, 2025

At ValidExamDumps, we consistently monitor updates to the Fortinet NSE7_PBC-6.4 exam questions by Fortinet. Whenever our team identifies changes in the exam questions,exam objectives, exam focus areas or in exam requirements, We immediately update our exam questions for both PDF and online practice exams. This commitment ensures our customers always have access to the most current and accurate questions. By preparing with these actual questions, our customers can successfully pass the Fortinet NSE 7 - Public Cloud Security 6.4 exam on their first attempt without needing additional materials or study guides.

Other certification materials providers often include outdated or removed questions by Fortinet in their Fortinet NSE7_PBC-6.4 exam. These outdated questions lead to customers failing their Fortinet NSE 7 - Public Cloud Security 6.4 exam. In contrast, we ensure our questions bank includes only precise and up-to-date questions, guaranteeing their presence in your actual exam. Our main priority is your success in the Fortinet NSE7_PBC-6.4 exam, not profiting from selling obsolete exam questions in PDF or Online Practice Test.

Question No. 1

Which two statements about Microsoft Azure network security groups are true? (Choose two.)

ANetwork security groups can be applied to subnets and virtual network interfaces.

BNetwork security groups can be applied to subnets only.

CNetwork security groups are stateless inbound and outbound rules used for traffic filtering.

DNetwork security groups are a stateful inbound and outbound rules used for traffic filtering.

Show Answer

Correct Answer: A, D

You can deploy resources from several Azure services into an Azure virtual network. For a complete list, see Services that can be deployed into a virtual network. You can associate zero, or one, network security group to each virtual network subnet and network interface in a virtual machine. The same network security group can be associated to as many subnets and network interfaces as you choose. https://learn.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works

Question No. 2

Which statement about FortiSandbox in Amazon Web Services (AWS) is true?

AIn AWS, virtual machines (VMs) that inspect files do not have to be reset after inspecting a file.

BFortiSandbox in AWS uses Windows virtual machines (VMs) to inspect files.

CIn AWS, virtual machines (VMs) that inspect files are constantly up and running.

DFortiSandbox in AWS can have a maximum of eight virtual machines (VMs) that inspect files.

Show Answer

Correct Answer: B

FortiSandbox deploys new EC2 instances with the custom Windows VMs, and then it sends malware, runs it, and captures the results for analysis. FortiSandbox for AWS does not need more resources because it performs management and analysis tasks only. Note that the cost varies based on the number of EC2 instances deployed, size of the instances, and duration of the running time.

Question No. 3

You have previously deployed an Amazon Web Services (AWS) transit virtual private cloud (VPC) with a pair of FortiGate firewalls (VM04 / c4.xlarge) as your security perimeter. You are beginning to see high CPU usage on the FortiGate instances.

Which action will fix this issue?

AConvert the c4.xlarge instances to m4.xlarge instances.

BMigrate the transit VPNs to new and larger instances (VM08 / c4.2xlarge).

CConvert from IPsec tunnels to generic routing encapsulation (GRE) tunnels, for the VPC peering connections.

DConvert the transit VPC firewalls into an auto-scaling group and launch additional EC2 instances in that group.

Show Answer

Correct Answer: D

Multiple FortiGate-VM instances form an Auto Scaling group to provide highly efficient clustering at times of high workloads. FortiGate-VM instances can be scaled out automatically according to predefined workload levels. https://docs.fortinet.com/document/fortigate-public-cloud/6.2.0/aws-administration-guide/397979/deploying-auto-scaling-on-aws

Question No. 4

You are deploying Amazon Web Services (AWS) GuardDuty to monitor malicious or unauthorized behaviors related to AWS resources. You will also use the Fortinet aws-lambda-guardduty script to translate feeds from AWS GuardDuty findings into a list of malicious IP addresses. FortiGate can then consume this list as an external threat feed.

Which Amazon AWS services must you subscribe to in order to use this feature?

AGuardDuty, CloudWatch, S3, Inspector, WAF, and Shield.

BGuardDuty, CloudWatch, S3, and DynamoDB.

CInspector, Shield, GuardDuty, S3, and DynamoDB.

DWAF, Shield, GuardDuty, S3, and DynamoDB.

Show Answer

Correct Answer: B

You must subscribe to GuardDuty, CloudWatch, S3, and DynamoDB. https://docs.fortinet.com/document/fortigate-public-cloud/6.4.0/aws-administration-guide/908646/populating-threat-feeds-with-guardduty

Question No. 5

An Amazon Web Services (AWS) auto-scale FortiGate cluster has just experienced a scale-down event, terminating a FortiGate in availability zone C.

This has now black-holed the private subnet in this availability zone.

What action will the worker node automatically perform to restore access to the black-holed subnet?

AThe worker node applies a route table from a non-black-holed subnet to the black-holed subnet.

BThe worker node moves the virtual IP of the terminated FortiGate to a running FortiGate on the worker node's private subnet interface.

CThe worker node modifies the route table applied to the black-holed subnet changing its default route to point to a running FortiGate on the worker node's private subnet interface.

DThe worker node migrates the subnet to a different availability zone.

Show Answer

Correct Answer: C

Official documentation, failover process on a single AZ, https://github.com/fortinet/aws-cloudformation-templates/blob/main/FGCP/7.0/SingleAZ/README.md#failover-process || Outbound failover is provided by reassigning the secondary IP addresses of ENI1\port2 from FortiGate 1's private interface to FortiGate 2's private interface. ##Additionally any route targets referencing FortiGate 1's private interface will be updated to reference FortiGate 2's private interface.##

https://github.com/fortinet/aws-cloudformation-templates/tree/master/LambdaAA-RouteFailover/6.0