Free NSE7_PBC-7.2 Practice Questions and Answers | Updated 2025

• Question 1

  You must allow an SSH traffic rule in an Amazon Web Services (AWS) network access list (NACL) to allow SSH traffic to travel to a subnet for temporary testing purposes. When you review the current inbound network ACL rules, you notice that rule number 5 demes SSH and telnet traffic to the subnetWhat can you do to allow SSH traffic?

  • You must create a new allow SSH rule below rule number 5
  • You must create a new allow SSH rule above rule number 5-
  • You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.
  • You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.

  Show Answer Answer: B Next

• Question 2

  An administrator would like to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware. Which Fortinet product or feature should the administrator use?

  • FortiCNP application control policies
  • FortiCNP web sensitive polices
  • FortiCNP DLP policies
  • FortiCNP compliance scanning policies

  Show Answer Answer: C Next

• Question 3

  Which two attachments are necessary to connect a transit gateway to an existing VPC with BGP? (Choose two )

  • A transport attachment
  • A BGP attachment
  • A connect attachment
  • A GRE attachment

  Show Answer Answer: A,C Next

• Question 4

  What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD-WAN?

  • It eliminates the use of ECMP
  • You can use GRE-based tunnel attachments
  • You can combine it with IPsec to achieve higher bandwidth
  • You can use BGP over IPsec for maximum throughput

  Show Answer Answer: B Next

• Question 5

  When adding the Amazon Web Services (AWS) account to the FortiCNP, which three mandatory configuration steps must you follow? (Choose three.)

  • Add AWS accounts through FortiCNP.
  • Enable cloud protection through AWS Guard Duty and AWS Inspector
  • Accept FortiCNP to create CloudTrail for the account
  • Enable cross-reg Ion aggregation
  • Launch the CloudFormation template.

  Show Answer Answer: A,C,E Next