NSE7_CDS_AR-7.6試験無料問題集（76題）「Fortinet NSE 7 - Public Cloud Security 7.6 Architect 認定」

出題：1

Your organization has several FortiGate VMs deployed in Azure. You need to implement a solution with Azure native tools that allows you to determine whether packets are being permitted or blocked by the FortiGate VMs.
Which solution can you use to meet these requirements?

A. Insert the VM traffic logs in Azure Sentinel.

B. Use IP flow verify for each of the VMs.

C. Install the Azure Monitor agent in all VMs.

D. Configure Azure Advisor to analyze the network traffic.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD- WAN?

A. You can combine it with IPsec to achieve higher bandwidth.

B. It eliminates the use of ECMP.

C. You can use BGP over IPsec for maximum throughput.

D. You can use GRE-based tunnel attachments.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

The DevOps team is troubleshooting a FortiGate software-defined network(SDN) connector that is failing to integrate with a Kubernetes cluster. While using several debug commands, they find that the connector connection generates an error code 401.
What is the cause of this error?

A. The configured client secret credentials are incorrect.

B. The service principal being used has the correct role assigned.

C. The Kubernetes cluster is using an unsupported API version.

D. The FortiGate firewall is using HTTP to send API calls instead of HTTPS.

正解：A 解答を投票する

出題：4

Refer to the exhibit. You are troubleshooting a Microsoft Azure SDN connector issue on your FortiGate VM in Azure. Which command can you use to examine details about API calls sent by the connector?

A. diag debug application azd 1

B. get system sdn-connector

C. diag test application azd 1

D. diag debug application cloud-connector -l

正解：A 解答を投票する

出題：5

Which statement about immutable infrastructure in automation is true?

A. It is the practice of deploying a new server for every configuration change.

B. It is the practice of modifying the existing server configuration after it is deployed.

C. It is the practice of deploying two parallel servers for high availability.

D. It is the practice of applying hotfixes and OS patches after deployment.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

Refer to the exhibit. An administrator used the what-if tool to preview changes to an Azure Bicep file. What will happen if the administrator decides to apply these changes in Azure?

A. A new subnet will be added to ServerApps.

B. The ServerApps VNet will be renamed.

C. Subnet 10.0.1.0/24 will replace subnet 10.0.2.0/24.

D. This deployment will fail and no changes will be applied.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Refer to the exhibit. You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS. However, your connection is not successful.
Given the network topology, what can be the issue?