Online Access Free NSE7_PBC-7.2 Exam Questions

Refer to the exhibit. The exhibit shows the results of a FortiCNP registry scan.

Which two statements are correct? (Choose two )

• A.The registry scan is part of the FortiCNP container protection.
• B.When adding a repository, you can leave the Tag section blank to scan all images-
• C.The registry scan is part of the FortiCNP cloud protection.
• D.When adding a repository, you can add a minimum number of images to be imported through the CAP section.

A Network security administrator is searching for a solution to secure traffic going in and out of the container infrastructure.
In which two ways can Fortinet container security help secure container infrastructure? (Choose two.)

• A.FortiGate NGFW can be placed between each application container for north-south traffic inspection
• B.FortiGate NGFW can connect to the worker node and protects the container-
• C.FortiGate NGFW and FortiSandbox can be used to secure container traffic
• D.FortiGate NGFW can inspect north-south container traffic with label aware policies

Refer to the exhibit. An administrator is trying to deploy a FortiGate VM in Microsoft Azure using Terraform. However, during the configuration, the Azure client secret is no longer visible in the Azure portal.

How would the administrator obtain the Azure client secret to configure on Terratorm?

• A.The administrator can create a new client secret
• B.The administrator must obtain the client secret through Azure Cloud Shell.
• C.Log in to the Azure CLI with power user to obtain the client secret
• D.The administrator must create a new Azure account

Customer XYZ has an ExpressRoute connection from Microsoft Azure to a data center. They want to secure communication over ExpressRoute, and to install an in-line FortiGate to perform intrusion prevention system (IPS) and antivirus scanning.
Which three methods can the customer use to ensure that all traffic from the data center is sent through FortiGate over ExpressRoute? (Choose three.)

• A.Configure a user-defined route table
• B.Configure the gateway subnet as the subnet in the user-defined route table
• C.Install FortiGate in Azure and build a VPN tunnel to the data center over ExpressRoute
• D.Enable the redirect option in ExpressRoute to send data center traffic to a user-defined route table
• E.Define a default route where the next hop IP is the FortiGate WAN interface

Refer to the exhibit. An administrator deployed a FortiGate-VM in a high availability (HA) (active/passive) architecture in Amazon Web Services (AWS) using Terraform for testing purposes. At the same time, the administrator deployed a single Linux server using AWS Marketplace.

Which two options are available for the administrator to delete all the resources created in this test? (Choose two.)

• A.Use the terraform destroy all command.
• B.The administrator must manually delete the Linux server.
• C.Use the terraform validate command.
• D.Use the terraform destroy command