NSE7_PBC-7.2 試験問題を無料オンラインアクセス

Refer to the exhibit. The exhibit shows a customer deployment of two Linux instances and their main routing table in Amazon Web Services (AWS). The customer also created a Transit Gateway (TGW) and two attachments.

Which two steps are required to route traffic from Linux instances to the TGWQ (Choose two.)

• A.In the main subnet routing table in VPC A and B, add a new route with destination 0.0.0.0/0, next hop Internet gateway (IGW).
• B.In the main subnet routing table in VPC A and B, add a new route with destination 0.0.0.0/0, next hop TGW.
• C.In the TGW route table, add route propagation to 192.168.0.0/16
• D.In the TGW route table, associate two attachments.

Which two statements about Microsoft Azure network security groups are true? (Choose two.)

• A.Network security groups are stateless inbound and outbound rules used for traffic filtering.
• B.Network security groups can be applied to subnets only.
• C.Network security groups can be applied to subnets and virtual network interfaces.
• D.Network security groups are a stateful inbound and outbound rules used for traffic filtering.

An Amazon Web Services (AWS) auto-scale FortiGate cluster has just experienced a scale-down event, terminating a FortiGate in availability zone C.
This has now black-holed the private subnet in this availability zone.
What action will the worker node automatically perform to restore access to the black-holed subnet?

• A.The worker node migrates the subnet to a different availability zone.
• B.The worker node applies a route table from a non-black-holed subnet to the black-holed subnet.
• C.The worker node moves the virtual IP of the terminated FortiGate to a running FortiGate on the worker node's private subnet interface.
• D.The worker node modifies the route table applied to the black-holed subnet changing its default route to point to a running FortiGate on the worker node's private subnet interface.

Refer to the exhibit. You are deploying a FortiGate-VM in Microsoft Azure using the PAYG/On- demand licensing model. After you configure the FortiGate-VM, the validation process fails, displaying the error shown in the exhibit.

What caused the validation process to fail?

• A.You selected the PAYG/On-demand licensing model, but did not associate a valid Azure subscription.
• B.You selected the incorrect resource group.
• C.You selected the Bring Your Own License (BYOL) licensing mode.
• D.You selected the PAYG/On-demand licensing model, but did not select correct virtual machine size.

Your company deploys FortiGate VM devices in high availability (HA) (active-active) mode with Microsoft Azure load balancers using the Microsoft Azure ARM template. Your senior administrator instructs you to connect to one of the FortiGate devices and configure the necessary firewall rules. However, you are not sure now to obtain the correct public IP address of the deployed FortiGate VM and identify the access ports.
How do you obtain the public IP address of the FortiGate VM and identify the correct ports to access the device?

• A.In the configured load balancer, access the inbound NAT rules section.
• B.In the configured load balancer, access the inbound and outbound NAT rules section.
• C.In the configured load balancer, access the backend pools section.
• D.In the configured load balancer, access the health probes section.