Fortinet NSE 7 - Public Cloud Security 7.6 Architect - NSE7_CDS

Question 1

You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes. When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and telnet traffic to the subnet.
What can you do to allow SSH traffic?

A. You must create two new allow SSH rules, each with a number smaller than 5.

B. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.

C. You must create two new allow SSH rules, each with a number bigger than 5.

D. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.

Correct Answer: A

Question 2

Refer to the exhibit.

After analyzing the native monitoring tools available in Azure, an administrator decides to use the tool displayed in the exhibit.
Why would an administrator choose this tool?

A. To obtain, and later examine, traffic flow data with a visualization tool.

B. To help debug issues affecting virtual network gateways.

C. To view details about Azure resources and their relationships across multiple regions.

D. To compare the latency of an on-premises site with the latency of an Azure application.

Correct Answer: D

Question 3

An administrator is trying to implement FortiCNP with Microsoft Azure Security integration. However, FortiCNP is not able to extract any cloud integration data from Azure; therefore, real-time cloud security monitoring is not possible.
What is causing this issue?

A. The administrator enabled the wrong defender plan for servers.

B. The FortiCNP account in Azure has the Storage Blob Data Reader role.

C. The Azure account doesn ' t have the global administrator role.

D. The organization is using a free Azure AD license.

Correct Answer: C

Question 4

Refer to the exhibit.

Which FortiCNP policy type generated the finding shown in the exhibit? (Choose one answer)

A. This finding was generated by a file collection policy.

B. This finding was generated by a threat detection policy.

C. This finding was generated by a data scan policy.

D. This finding was generated by a risk management policy.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

An Azure administrator is trying to optimize the Azure Bicep files currently used for cloud deployments.
Which technique can Azure administrators use to improve the code in Azure Bicep files?

A. Use the what-if operation before deploying new resources.

B. Avoid nesting related resources to improve readability.

C. Limit the allowed parameters with the use of decorators.

D. Always use parameter files with the .json extension.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

An administrator is looking for a solution that can provide insight into users and data stored in major SaaS applications in the multicloud environment. Which product should the administrator deploy to have secure access to SaaS applications? (Choose one answer)

A. FortiSandbox

B. FortiSIEM

C. FortiCASB

D. FortiWeb

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

You have onboarded the organization's Microsoft Azure account on FortiCNAPP using the automated configuration approach. However, FortiCNAPP does not appear to be receiving any workload scanning data.
How can you remedy this? (Choose one answer)

A. Add the appropriate integration type using the guided configuration.

B. Add a FortiCNAPP threat policy to monitor Azure workloads.

C. Add a service principal in the Azure Cloud Shell.

D. Add a new Azure App Registration.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Fortinet NSE 7 - Public Cloud Security 7.6 Architect - NSE7_CDS_AR-7.6 Exam Practice Test

Latest Update

Useful Links

Contact Us