Online Access Free NSE7_PBC-6.4 Exam Questions

Refer to the exhibit.

A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Web servers to the Internet. The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface.
What are two possible reasons for this behavior? (Choose two.)

• A.The Internet gateway (IGW) is not added to VPC (virtual private cloud).
• B.AWS source and destination checks are enabled on the FortiGate interfaces.
• C.AWS security groups may be blocking the traffic.
• D.The web servers are not configured with the default gateway.

Refer to the exhibit.

Which two conditions will enable you to segregate and secure the traffic between the hub and the spokes in Microsoft Azure? (Choose two.)

• A.Configure VNet peering between the hub and spokes.
• B.Implement the FortiGate-VM network virtual appliance (NVA) in the hub and use user-defined routes (UDRs) in the spokes.
• C.Configure VNet peering between the spokes only.
• D.Use ExpressRoute to interconnect the hub VNets and spoke VNets.

You have previously deployed an Amazon Web Services (AWS) transit virtual private cloud (VPC) with a pair of FortiGate firewalls (VM04 / c4.xlarge) as your security perimeter. You are beginning to see high CPU usage on the FortiGate instances.
Which action will fix this issue?

• A.Convert the transit VPC firewalls into an auto-scaling group and launch additional EC2 instances in that group.
• B.Convert from IPsec tunnels to generic routing encapsulation (GRE) tunnels, for the VPC peering connections.
• C.Convert the c4.xlarge instances to m4.xlarge instances.
• D.Migrate the transit VPNs to new and larger instances (VM08 / c4.2xlarge).

Which two statements about Microsoft Azure network security groups are true? (Choose two.)

• A.Network security groups are stateless inbound and outbound rules used for traffic filtering.
• B.Network security groups are a stateful inbound and outbound rules used for traffic filtering.
• C.Network security groups can be applied to subnets and virtual network interfaces.
• D.Network security groups can be applied to subnets only.