NSE7_PBC-6.4無料問題集「Fortinet NSE 7 - Public Cloud Security 6.4」

質問 1

Refer to the exhibit.

A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Web servers to the Internet. The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface.
What are two possible reasons for this behavior? (Choose two.)

（A）The Internet gateway (IGW) is not added to VPC (virtual private cloud).

（B）AWS source and destination checks are enabled on the FortiGate interfaces.

（C）The web servers are not configured with the default gateway.

（D）AWS security groups may be blocking the traffic.

正解：B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which two statements about the Amazon Cloud Services (AWS) network access control lists (ACLs) are true?
(Choose two.)

（A）Network ACLs are stateless, and inbound and outbound rules are used for traffic filtering.

（B）Network ACLs support allow rules and deny rules.

（C）Network ACLs are stateful, and inbound and outbound rules are used for traffic filtering.

（D）Network ACLs must be manually applied to virtual network interfaces.

正解：A、B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit.

Which two conditions will enable you to segregate and secure the traffic between the hub and the spokes in Microsoft Azure? (Choose two.)

（A）Implement the FortiGate-VM network virtual appliance (NVA) in the hub and use user-defined routes (UDRs) in the spokes.

（B）Configure VNet peering between the spokes only.

（C）Configure VNet peering between the hub and spokes.

（D）Use ExpressRoute to interconnect the hub VNets and spoke VNets.

正解：A、C 解答を投票する

NSE7_PBC-6.4 無料問題集「Fortinet NSE 7 - Public Cloud Security 6.4」

弊社を連絡する

関連リンク

トップ試験