NSE7_CDS_AR-7.6 試験問題を無料オンラインアクセス

Refer to the exhibit. You are managing an active-passive FortiGate HA cluster in AWS that was deployed using CloudFormation. You have created a change set to examine the effects of some proposed changes to the current infrastructure. The exhibit shows some sections of the change set.
What will happen if you apply these changes?

• A.CloudFormation checks if you will surpass your account quota.
• B.This deployment can be done without any traffic interruption.
• C.The updated FortiGate VMs will not have the latest configuration changes.
• D.Both FortiGate VMs will get a new PhysicalResourceId.

Your organization has several FortiGate VMs deployed in Azure. You need to implement a solution with Azure native tools that allows you to determine whether packets are being permitted or blocked by the FortiGate VMs.
Which solution can you use to meet these requirements?

• A.Install the Azure Monitor agent in all VMs.
• B.Insert the VM traffic logs in Azure Sentinel.
• C.Configure Azure Advisor to analyze the network traffic.
• D.Use IP flow verify for each of the VMs.

Refer to the exhibit. An administrator deployed an HA active-active load balance sandwich in Microsoft Azure. The setup requires configuration synchronization between devices.
What can you conclude from the configured settings shown in the exhibit? (Choose two.)

• A.By default, FortiGate uses FGCP.
• B.It does not synchronize the FortiGate hostname.
• C.FortiGate A and FortiGate B are two independent devices.
• D.FortiGate-VM instances are scaled out automatically according to predefined workload levels.

Which two statements about the Amazon Web Services (AWS) security groups are true?
(Choose two.)

• A.EC2 instances, elastic network interfaces (ENIs), and subnets may have security groups configured on them.
• B.A security group is a stateful list of ingress and egress traffic rules.
• C.Configured traffic rules may have an action of allow or deny.
• D.Security groups are applicable at the instance level.

An administrator decides to use the Use managed identity option on the FortiGate SDN connector with Microsoft Azure. However, the SDN connector is failing on the connection. What must the administrator do to correct this issue?

• A.Make sure to add the Client Secret on the FortiGate side of the configuration.
• B.Make sure to set the type to system managed identity on FortiGate SDN connector settings.
• C.Make sure to enable the system-assigned managed identity on Azure.
• D.Make sure to add the Tenant ID on the FortiGate side of the configuration.