Now you can prepare for your Fortinet NSE 7 - Public Cloud Security 6.4 with Passcert new NSE7_PBC-6.4 Exam Dumps. In Our NSE7_PBC-6.4 Exam Dumps you will get the real and actual Fortinet NSE7_PBC-6.4 exam questions with their verified answers that guarantee 100% success in your Fortinet NSE 7 - Public Cloud Security 6.4 Exam. By using our NSE7_PBC-6.4 Exam Dumps you will be able to prepare all the important questions of the NSE7_PBC-6.4 exam. You will pass your Fortinet NSE 7 - Public Cloud Security 6.4 exam in your first attempt easily with the help of Passcert.

The Fortinet Network Security Architect designation identifies your advanced skills in deploying, administering, and troubleshooting Fortinet security solutions. We recommend this certification for network and security professionals who are involved in the advanced administration and support of security infrastructures using Fortinet solutions.

Fortinet NSE 7 - Advanced Analytics

Fortinet NSE 7 - Advanced Threat Protection

Fortinet NSE 7 - Enterprise Firewall

Fortinet NSE 7 - OT Security

Fortinet NSE 7 - Public Cloud Security

Fortinet NSE 7 - SD-WAN

Fortinet NSE 7 - Secure Access

The Fortinet NSE 7—Public Cloud Security 6.4 exam is part of the NSE 7 Network Security Architect program, and recognizes the successful candidate’s knowledge and expertise with Fortinet solutions in public cloud network environments. The exam tests applied knowledge of the integration and administration of Fortinet public cloud security solutions, and includes design scenarios, configuration extracts, and troubleshooting captures.

The Fortinet NSE 7—Public Cloud Security 6.4 exam is intended for network and security professionals who are responsible for the integration and administration of an enterprise public cloud security infrastructure composed of multiple Fortinet solutions.

Successful candidates have applied knowledge and skills in the following areas and tasks:

Explain cloud-specific architectural requirements, deploy and integrate Fortinet solutions with public cloud providers, and troubleshoot public cloud components.

Identify Fortinet WAF solutions for AWS

Review AWS basic concepts and componets

Configure high availability (HA), load balancing, and autoscaling

Identify traffic patterns, MPLS, IPsec, Direct Connect

Secure the public cloud

Apply auto scaling, resilience / availability, transit VPCs, load balancing

Implement marketplace deployment, templates, sizing, automation

Apply FortiGate AWS SDN integration

Choose Fortinet products licensing in AWS Marketplace: PAYG, BYOL

Identify Azure Security Center, Azure Stack

Identify traffic patterns, MPLS, IPsec, ExpressRoute, Traffic Manager

Configure resilience / availability, Transit VNet, load balancing, east-west inspection

Configure HA, load balancing, and autoscaling

Choose Fortinet products licensing in Azure Marketplace: PAYG, BYOL

Implement marketplace deployment, templates, sizing, automation

Deploy FortiGate in GCP

Identify traffic patterns, MPLS, IPsec, and dedicated interconnection

Perform installation, sizing, and licensing: BYOL

Review FortiCASB architecture and supported applications

Review FortiCWP architecture

Configure FortiCASB

1.When configuring the FortiCASB policy, which three configuration options are available? (Choose three.)

A. Intrusion prevention policies

B. Threat protection policies

C. Data loss prevention policies

D. Compliance policies

E. Antivirus policies

Answer: BCD

2.You have been tasked with deploying FortiGate VMs in a highly available topology on the Amazon Web Services (AWS) cloud.

The requirements for your deployment are as follows:

? You must deploy two FortiGate VMs in a single virtual private cloud (VPC), with an external elastic load balancer which will distribute ingress traffic from the internet to both FortiGate VMs in an active-active topology.

? Each FortiGate VM must have two elastic network interfaces: one will connect to a public subnet and other will connect to a private subnet.

? To maintain high availability, you must deploy the FortiGate VMs in two different availability zones.

How many public and private subnets will you need to configure within the VPC?

A. One public subnet and two private subnets

B. Two public subnets and one private subnet

C. Two public subnets and two private subnets

D. One public subnet and one private subnet

Answer: A

3.You are deploying Amazon Web Services (AWS) GuardDuty to monitor malicious or unauthorized behaviors related to AWS resources. You will also use the Fortinet aws-lambda-guardduty script to translate feeds from AWS GuardDuty findings into a list of malicious IP addresses. FortiGate can then consume this list as an external threat feed.

Which Amazon AWS services must you subscribe to in order to use this feature?

A. GuardDuty, CloudWatch, S3, Inspector, WAF, and Shield.

B. GuardDuty, CloudWatch, S3, and DynamoDB.

C. Inspector, Shield, GuardDuty, S3, and DynamoDB.

D. WAF, Shield, GuardDuty, S3, and DynamoDB.

Answer: A

4.An Amazon Web Services (AWS) auto-scale FortiGate cluster has just experienced a scale-down event, terminating a FortiGate in availability zone C.

This has now black-holed the private subnet in this availability zone.

What action will the worker node automatically perform to restore access to the black-holed subnet?

A. The worker node applies a route table from a non-black-holed subnet to the black-holed subnet.

B. The worker node moves the virtual IP of the terminated FortiGate to a running FortiGate on the worker node's private subnet interface.

C. The worker node modifies the route table applied to the black-holed subnet changing its default route to point to a running FortiGate on the worker node's private subnet interface.

D. The worker node migrates the subnet to a different availability zone.

Answer: D

5.Which two statements about the Amazon Cloud Services (AWS) network access control lists (ACLs) are true? (Choose two.)

A. Network ACLs are stateless, and inbound and outbound rules are used for traffic filtering.

B. Network ACLs are stateful, and inbound and outbound rules are used for traffic filtering.

C. Network ACLs must be manually applied to virtual network interfaces.

D. Network ACLs support allow rules and deny rules.

Answer: AD