NSE7_CDS_AR-7.6試験無料問題集（69題）「Fortinet NSE 7 - Public Cloud Security 7.6 Architect 認定」

出題：1

Refer to the exhibit.

What is the purpose of this section of an Azure Bicep file?

A. To indicate the correct FortiOS upgrade path after deployment

B. To document the FortiOS versions in the resulting topology

C. To add a comment with the permitted FortiOS versions that can be deployed

D. To restrict which FortiOS versions are accepted for deployment

正解：D 解答を投票する

出題：2

Refer to the exhibit.

A FortiCNAPP administrator used the FortiCNAPP Explorer to reveal all hosts exposed to the internet that are running active packages with vulnerabilities of all severity levels. Why do only the first two results have an attack path? (Choose one answer)

A. Attack paths are available only for resources with potential multi-hop exposure.

B. Attack paths are available only for AWS resources with public IP addresses.

C. Attack paths are available only for resources that have critical vulnerabilities.

D. Attack paths are available only for AWS resources with high impact scores.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

You are investigating an attack path for a top risky host. You notice that the Common Vulnerability Scoring System (CVSS) and the vulnerability impact scores are very high. However, the attack path severity for the top risky host itself is low. Which two pieces of contextualized information can help you understand why?
(Choose two answers)

A. The package status

B. The fix version

C. The FortiCNAPP risk score

D. The vulnerability score

正解：A,C 解答を投票する

出題：4

What would be the impact of confirming to delete all the resources in Terraform?

A. It destroys all the resources in the .tfvars file.

B. It destroys all the resources in the resource group.

C. It destroys all the resources tied to the AWS Identity and Access Management (IAM) user.

D. It destroys all the resources in the .tfstate file.

正解：D 解答を投票する

出題：5

Which statement about Transit Gateway (TGW) in Amazon Web Services (AWS) is true?

A. TGW can have multiple TGW route tables.

B. Both the TGW attachment and propagation must be in the same TGW route table.

C. A TGW attachment can be associated with multiple TGW route tables.

D. The TGW default route table cannot be disabled.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Refer to the exhibit.

You deployed a FortiGate HA active-passive cluster in Microsoft Azure.
Which two statements regarding this particular deployment are true? (Choose two.)

A. The configuration does not synchronize between the primary and secondary devices.

B. You can use the vdom-exception command to synchronize the configuration.

C. There is no SLA for API calls from Microsoft Azure.

D. During a failover, all existing sessions are transferred to the new active FortiGate.

正解：C,D 解答を投票する

出題：7

Refer to the exhibit.

Your team notices an unusually high volume of traffic sourced at one of the organizations FortiGate EC2 instances. They create a flow log to obtain and analyze detailed information about this traffic. However, when they checked the log, they found that it included traffic that was not associated with the FortiGate instance in question.
What can they do to obtain the correct logs? (Choose one answer)

A. Ensure that the flow log data is not mixed with the rest of the traffic.

B. Change the maximum aggregation time to 1 minute.

C. Create a new flow log at the interface level.

D. Send the logs to Amazon Data Firehose instead to get more granular information.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_CDS_AR-7.6試験無料問題集「Fortinet NSE 7 - Public Cloud Security 7.6 Architect 認定」