Free NSE7_PBC-6.4 Exam Dumps

No Installation Required, Instantly Prepare for the NSE7_PBC-6.4 exam and please click the below link to start the NSE7_PBC-6.4 Exam Simulator with a real NSE7_PBC-6.4 practice exam questions.
Use directly our on-line NSE7_PBC-6.4 exam dumps materials and try our Testing Engine to pass the NSE7_PBC-6.4 which is always updated.

Exam Code: NSE7_PBC-6.4
Exam Title: Fortinet NSE 7 - Public Cloud Security 6.4
Vendor: Fortinet
Exam Questions: 30
Last Updated: June 29th,2024

Question 1

Customer XYZ has an ExpressRoute connection from Microsoft Azure to a data center. They want to secure communication over ExpressRoute, and to install an in-line FortiGate to perform intrusion prevention system (IPS) and antivirus scanning.
Which three methods can the customer use to ensure that all traffic from the data center is sent through FortiGate over ExpressRoute? (Choose three.)

A. Install FortiGate in Azure and build a VPN tunnel to the data center over ExpressRoute
B. Configure a user-defined route table
C. Enable the redirect option in ExpressRoute to send data center traffic to a user-defined route table
D. Configure the gateway subnet as the subnet in the user-defined route table
E. Define a default route where the next hop IP is the FortiGate WAN interface

Correct Answer:CDE

Question 2

You have been asked to develop an Azure Resource Manager infrastructure as a code template for the FortiGate-VM, that can be reused for multiple deployments. The deployment fails, and errors point to the storageAccount name.
Which two are restrictions for a storageAccount name in an Azure Resource Manager template? (Choose two.)

A. The uniqueString() function must be used.
B. The storageAccount name must use special characters.
C. The storageAccount name must be in lowercase.
D. The storageAccount name must contain between 3 and 24 alphanumeric characters.

Correct Answer:AC

Question 3

Refer to the exhibit.
NSE7_PBC-6.4 dumps exhibit
You are deploying a FortiGate-VM in Microsoft Azure using the PAYG/On-demand licensing model. After you configure the FortiGate-VM, the validation process fails, displaying the error shown in the exhibit.
What caused the validation process to fail?

A. You selected the incorrect resource group.
B. You selected the Bring Your Own License (BYOL) licensing mode.
C. You selected the PAYG/On-demand licensing model, but did not select correct virtual machine size.
D. You selected the PAYG/On-demand licensing model, but did not associate a valid Azure subscription.

Correct Answer:A

Question 4

Your company deploys FortiGate VM devices in high availability (HA) (active-active) mode with Microsoft Azure load balancers using the Microsoft Azure ARM template. Your senior administrator instructs you to connect to one of the FortiGate devices and configure the necessary firewall rules. However, you are not sure now to obtain the correct public IP address of the deployed FortiGate VM and identify the access ports.
How do you obtain the public IP address of the FortiGate VM and identify the correct ports to access the device?

A. In the configured load balancer, access the inbound NAT rules section.
B. In the configured load balancer, access the backend pools section.
C. In the configured load balancer, access the inbound and outbound NAT rules section.
D. In the configured load balancer, access the health probes section.

Correct Answer:C

Question 5

Refer to the exhibit.
NSE7_PBC-6.4 dumps exhibit
You attempted to deploy the FortiGate-VM in Microsoft Azure with the JSON template, and it failed to boot up. The exhibit shows an excerpt from the JSON template.
What is incorrect with the template?

A. The LUN ID is not defined.
B. FortiGate-VM does not support managedDisk from Azure.
C. The caching parameter should be None.
D. The CreateOptions parameter should be FromImage.

Correct Answer:D