Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

NSE7-PBC-7-2 by Fortinet - Page 1 | ExamCademy

Mode Selection

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 2 • Questions 1-25 of 33

1 2

→

Know a question that should be here? Contribute to this exam

In an SD-WAN TGW Connect topology, which three initial steps are mandatory when routing traffic from a spoke VPC to a security VPC through a Transit Gateway? (Choose three.)

A From the security VPC TGW subnet routing table, point 0.0.0.0/0 traffic to the FortiGate internal port.
B From the security VPC FortiGate internal subnet routing table, point 0.0.0.0/0 traffic to the TGW.
C From the spoke VPC internal routing table, point 0.0.0.0/0 traffic to the TGW.
D From the security VPC TGW subnet routing table, point 0.0.0.0/0 traffic to the TGW.
E From both spoke VPCs, and the security VPC, point 0.0.0.0/0 traffic to the Internet Gateway.

Which two Amazon Web Services (AWS) features do you use for the transit virtual private cloud (VPC) automation process to add new spoke VPCs? (Choose two.)

A Amazon CloudWatch
B Amazon S3 bucket
C AWS Transit Gateway
D AWS Security Hub

You are adding a new spoke to the existing transit VPC environment using the AWS CloudFormation template.
Which two components must you use for this deployment? (Choose two.)

A The Amazon CloudWatch tag value.
B The tag value of the spoke.
C The BGP ASN value used for the transit VPC.
D The OSPF AS value used for the hub.

What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD-WAN?

A You can use GRE-based tunnel attachments.
B You can use BGP over IPsec for maximum throughput.
C You can combine it with IPsec to achieve higher bandwidth.
D It eliminates the use of ECMP.

Which two statements are true about Transit Gateway Connect peers in aniPv4 BGP configuration? (Choose two.)

A You cannot use IPv6 addresses.
B The inside CIDR blocks are used for BGP peering.
C You must configure the second address from the IPv4 range on the device as the BGP IP address.
D You must specify a /29 CIDR block from the 169.254.0.0/16 range.

Refer to the exhibit.

Question Image

You deployed an HA active-passive FortiGate VM in Microsoft Azure.
Which two statements regarding this particular deployment are true? (Choose two.)

A Use the vdom-exception command to synchronize the configuration.
B In this example, the configuration does not synchronize between the primary and secondary devices.
C During the failover, the passive FortiGate issues API calls to Azure.
D There is no SLA for API calls from Microsoft Azure.