NSE7_CDS_AR-7.6無料問題集「Fortinet NSE 7 - Public Cloud Security 7.6 Architect」

質問 1

Refer to the exhibit.

You deployed a FortiGate HA active-passive cluster in Microsoft Azure.
Which two statements regarding this particular deployment are true? (Choose two.)

（A）During a failover, all existing sessions are transferred to the new active FortiGate.

（B）There is no SLA for API calls from Microsoft Azure.

（C）You can use the vdom-exception command to synchronize the configuration.

（D）The configuration does not synchronize between the primary and secondary devices.

正解：A、B 解答を投票する

質問 2

Refer to the exhibit.

After the initial Terraform configuration in Microsoft Azure, the terraform plan command is run.
Which two statements about running the terraform plan command are true? (Choose two.)

（A）You must run the terraform init command once, before the terraform plan command.

（B）The terraform plan command will deploy the rest of the resources except the service principle details.

（C）You cannot run the terraform apply command before the terraform plan command.

（D）The terraform plan command makes terraform do a dry run.

正解：A、D 解答を投票する

質問 3

How does an administrator secure container environments in Amazon AWS from newly emerged security threats? (Choose one answer)

（A）Using distributed network-related application control signatures.

（B）Using Amazon AWS_S3-related application control signatures.

（C）Using Docker-related application control signatures.

（D）Using Amazon AWS-related application control signatures.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD-WAN?

（A）It eliminates the use of ECMP.

（B）You can use GRE-based tunnel attachments.

（C）You can combine it with IPsec to achieve higher bandwidth.

（D）You can use BGP over IPsec for maximum throughput.

正解：B 解答を投票する

質問 5

An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware. Which FortiCNP feature should the administrator use?

（A）FortiCNP Threat Detection policies

（B）FortiCNP Risk Management policies

（C）FortiCNP Compliance policies

（D）FortiCNP Data Scan policies

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes. When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and telnet traffic to the subnet.
What can you do to allow SSH traffic?

（A）You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.

（B）You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.

（C）You must create two new allow SSH rules, each with a number smaller than 5.

（D）You must create two new allow SSH rules, each with a number bigger than 5.

正解：C 解答を投票する

質問 7

An administrator implements FortiWeb ingress controller to protect containerized web applications in an AWS Elastic Kubernetes Service (EKS) cluster.

What can you conclude about the topology shown in FortiView?

（A）The FortiWeb VM gets the latest cluster information through an SDN connector.

（B）This topology has two services and two ingress controllers deployed.

（C）Both services will be load balanced among the two nodes and the four pods.

（D）Adding a new service will update the FortiWeb configuration automatically.

正解：A 解答を投票する

NSE7_CDS_AR-7.6 無料問題集「Fortinet NSE 7 - Public Cloud Security 7.6 Architect」

弊社を連絡する

関連リンク

トップ試験