NSE7_PBC-6.4 Free Practice Test

You have been asked to develop an Azure Resource Manager infrastructure as a code template for the FortiGate-VM, that can be reused for multiple deployments. The deployment fails, and errors point to the storageAccount name.
Which two are restrictions for a storageAccount name in an Azure Resource Manager template? (Choose two.)

1. A. The uniqueString() function must be used.
2. B. The storageAccount name must use special characters.
3. C. The storageAccount name must be in lowercase.
4. D. The storageAccount name must contain between 3 and 24 alphanumeric characters.

Correct Answer: AC

Refer to the exhibit.

Consider an active-passive HA deployment in Microsoft Azure. The exhibit shows an excerpt from the passive FortiGate-VM node.
If the active FortiGate-VM fails, what are the results of the API calls made by the FortiGate named SSTENTAZFGT-0302? (Choose two.)

1. A. SSTENTAZFGT-03-FloatingPIP is assigned to the IP configuration with the name SSTENTAZFGT- 0302-Nic-01, under the network interface SSTENTAZFGT-0302-Nic-01
2. B. 172.29.32.71 is set as a next hop IP for all routes under FortigateUDR-01
3. C. The network interface of the active unit moves to itself
4. D. SSTENTAZFGT-03-FloatingPIP public IP is assigned to NIC SSTENTAZFGT-0302-Nic-01

Correct Answer: AB

When an organization deploys a FortiGate-VM in a high availability (HA) (active/active) architecture in Microsoft Azure, they need to determine the default timeout values of the load balancer probes.
In the event of failure, how long will Azure take to mark a FortiGate-VM as unhealthy, considering the default timeout values?

1. A. Less than 10 seconds
2. B. 30 seconds
3. C. 20 seconds
4. D. 16 seconds

Correct Answer: B

When configuring the FortiCASB policy, which three configuration options are available? (Choose three.)

1. A. Intrusion prevention policies
2. B. Threat protection policies
3. C. Data loss prevention policies
4. D. Compliance policies
5. E. Antivirus policies

Correct Answer: BCD

Customer XYZ has an ExpressRoute connection from Microsoft Azure to a data center. They want to secure communication over ExpressRoute, and to install an in-line FortiGate to perform intrusion prevention system (IPS) and antivirus scanning.
Which three methods can the customer use to ensure that all traffic from the data center is sent through FortiGate over ExpressRoute? (Choose three.)

1. A. Install FortiGate in Azure and build a VPN tunnel to the data center over ExpressRoute
2. B. Configure a user-defined route table
3. C. Enable the redirect option in ExpressRoute to send data center traffic to a user-defined route table
4. D. Configure the gateway subnet as the subnet in the user-defined route table
5. E. Define a default route where the next hop IP is the FortiGate WAN interface

Correct Answer: CDE