Fortinet NSE 7 - Public Cloud Security 7.2

Here you have the best Fortinet NSE7_PBC-7.2 practice exam questions

You have 34 total questions to study from
Each page has 5 questions, making a total of 7 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on May 31, 2025
This site is not affiliated with or endorsed by Fortinet.

Question 1 of 34

Refer to the exhibit.

The exhibit shows a customer deployment of two Linux instances and their main routing table in Amazon Web Services (AWS). The customer also created a Transit Gateway (TGW) and two attachments.

Which two steps are required to route traffic from Linux instances to the TGW? (Choose two.)

In the TGW route table, add route propagation to 192.168.0.0/16.

In the main subnet routing table in VPC A and B, add a new route with destination 0.0.0.0/0, next hop Internet gateway (IGW).

In the TGW route table, associate two attachments.

In the main subnet routing table in VPC A and B, add a new route with destination 0.0.0.0/0, next hop TGW.

Correct Answer: C, D

Question 2 of 34

What kind of underlying mechanism does Transit Gateway Connect use to send traffic from the virtual private cloud (VPC) to the transit gateway?

A GRE attachment

A BGP attachment

A Transit Gateway Connect attachment

A transport attachment

Correct Answer: A

Question 3 of 34

In an SD-WAN TGW Connect topology, which three initial steps are mandatory when routing traffic from a spoke VPC to a security VPC through a Transit Gateway? (Choose three.)

From the security VPC TGW subnet routing table, point 0.0.0.0/0 traffic to the FortiGate internal port.

From the security VPC FortiGate internal subnet routing table, point 0.0.0.0/0 traffic to the TGW.

From the spoke VPC internal routing table, point 0.0.0.0/0 traffic to the TGW.

From the security VPC TGW subnet routing table, point 0.0.0.0/0 traffic to the TGW.

From both spoke VPCs, and the security VPC, point 0.0.0.0/0 traffic to the Internet Gateway.

Correct Answer: B, C, D

Question 4 of 34

Which two Amazon Web Services (AWS) features do you use for the transit virtual private cloud (VPC) automation process to add new spoke VPCs? (Choose two.)

Amazon CloudWatch

Amazon S3 bucket

AWS Transit Gateway

AWS Security Hub

Correct Answer: A, B

Question 5 of 34

How does an administrator secure container environments from newly emerged security threats?

Use distributed network-related application control signatures.

Use Docker-related application control signatures.

Use Amazon AWS_S3-related application control signatures.

Use Amazon AWS-related application control signatures.

Correct Answer: B