Free Practice Fortinet NSE7_PBC-7.2 Exam Questions 2025

Stay ahead with 100% Free Fortinet NSE 7 - Public Cloud Security 7.2 NSE7_PBC-7.2 Dumps Practice Questions

Page: 1 / 12

Total 60 Questions | Updated On: Mar 25, 2025

Add To Cart

Question 1

You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost Which solution meets the requirements?

A : Use FortiADC

B : Use FortiCNP

C : Use FortiWebCloud

D : Use FortiGate

Answer: C

Question 2

Refer to Exhibit:

The exhibit shows the Connect Peers settings on Amazon Web Services (AWS) transit gateway attachments

With two FortiGate VMS in a security VPC.

Which two statements are correct? (Choose two.)

A : The peer GRE address is the FortiGate external interface IP address.

B : The Transit Gateway GRE address is auto-generated

C : The BGP inside CIDR blocks can be any CIDR block with /29

D : The Peer GRE address is the FortiGate internal interface IP address

Answer: A,B

Question 3

Refer to the exhibit

You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services (AWS). You examined the variables.tf file. What will be the final result after running the terraform init and terraform apply commands?

A : Terraform will not deploy a FortiGate VM

B : Terraform will deploy a FortiGate VM in the eu-West-Ia region with private and public subnets.

C : Terraform will deploy a FortiGate VM in the eu-West-1a region with two subnets and byol license.

D : Terraform will deploy a FortiGate VM in the eu-West-Ia region without any subnets.

Answer: B

Question 4

You are asked to find a solution to replace the existing VPC peering topology to have a higher bandwidth connection from Amazon Web Services (AWS) to the on-premises data center Which two solutions will satisfy the requirement? (Choose two.)

A : Use ECMP and VPN to achieve higher bandwidth.

B : Use transit VPC to build multiple VPC connections to the on-premises data center

C : Use a transit VPC with hub and spoke topology to create multiple VPN connections to the on-premises data center

D : Use the transit gateway attachment With VPN option to create multiple VPN connections to the on-premises data center

Answer: C,D

Question 5

Refer to the exhibit.

You are troubleshooting a FortiGate HA floating IP issue with Microsoft Azure. After the failover, the new primary device does not have the previous primary device floating IP address. What could be the possible issue With this scenario?

A : FortiGate port4 does not have internet access.

B : A wrong client secret credential is used

C : The error is caused by credential time expiration.

D : The Azure service principle account must have a contributor role.

Answer: D

Page: 1 / 12

Total 60 Questions | Updated On: Mar 25, 2025

Add To Cart