Fortinet NSE 7 - Public Cloud Security 6.4 (NSE7_PBC-6.4) Free Practice Test

Question 1

Customer XYZ has an ExpressRoute connection from Microsoft Azure to a data center. They want to secure communication over ExpressRoute, and to install an in-line FortiGate to perform intrusion prevention system (IPS) and antivirus scanning.
Which three methods can the customer use to ensure that all traffic from the data center is sent through FortiGate over ExpressRoute? (Choose three.)

A. Configure a user-defined route table

B. Configure the gateway subnet as the subnet in the user-defined route table

C. Define a default route where the next hop IP is the FortiGate WAN interface

D. Enable the redirect option in ExpressRoute to send data center traffic to a user-defined route table

E. Install FortiGate in Azure and build a VPN tunnel to the data center over ExpressRoute

Correct Answer: B,C,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

You have been asked to secure your organization's salesforce application that is running on Microsoft Azure, and find an effective method for inspecting shadow IT activities in the organization. After an initial investigation, you find that many users access the salesforce application remotely as well as on-premises.
Your goal is to find a way to get more visibility, control over shadow IT-related activities, and identify any data leaks in the salesforce application.
Which three steps should you take to achieve your goal? (Choose three.)

A. Deploy and configure FortiCASB with a Fortinet FortiCASB subscription license.

B. Use FortiGate, FortiGuard, and FortiAnalyzer solutions.

C. Deploy and configure FortiCWP with a workload guardian license.

D. Configure FortiCASB and set up access rights, privileges, and data protection policies.

E. Deploy and configure FortiGate with Security Fabric solutions, and FortiCWP with a storage guardian advance license.

Correct Answer: A,B,D

Question 3

You are deploying Amazon Web Services (AWS) GuardDuty to monitor malicious or unauthorized behaviors related to AWS resources. You will also use the Fortinet aws-lambda-guardduty script to translate feeds from AWS GuardDuty findings into a list of malicious IP addresses. FortiGate can then consume this list as an external threat feed.
Which Amazon AWS services must you subscribe to in order to use this feature?

A. WAF, Shield, GuardDuty, S3, and DynamoDB.

B. GuardDuty, CloudWatch, S3, Inspector, WAF, and Shield.

C. GuardDuty, CloudWatch, S3, and DynamoDB.

D. Inspector, Shield, GuardDuty, S3, and DynamoDB.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 7 - Public Cloud Security 6.4 (NSE7_PBC-6.4) Free Practice Test