Question 1

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

Options :

A : The inside CIDR blocks are used for BGP peering

B : You cannot use IPv6 addresses

C : You must specify a /29CIDR block from the 169.254.0.0/16 range

D : You must configure the second address from the IPv4 range on the device as the BGP IP address

Answer: A,C

Question 2

You have created a TGW route table to route traffic from your spoke VPC to the security VPC where two FortiGate devices are inspecting traffic. Your spoke VPC CIDR block is already propagated to the Transit Gateway (TGW) route table. Which type of attachment should you use to advertise routes through BGP from the spoke VPC to the security VPC?

Options :

A : Connect attachment

B : VPC attachment

C : Route attachment

D : GRE attachment

Answer: B

Question 3

You are asked to find a solution to replace the existing VPC peering topology to have a higher bandwidth connection from Amazon Web Services (AWS) to the on-premises data center Which two solutions will satisfy the requirement? (Choose two.)

Options :

A : Use ECMP and VPN to achieve higher bandwidth.

B : Use transit VPC to build multiple VPC connections to the on-premises data center

C :

Use a transit VPC with hub and spoke topology to create multiple VPN connections to the on-premises data center

D :

Use the transit gateway attachment With VPN option to create multiple VPN connections to the on-premises data center

Answer: C,D

Question 4

Refer to Exhibit:

You are troubleshooting a Microsoft Azure SDN connector issue on your FortiGate VM in Azure Which three settings should you check while troubleshooting this problem? (Choose three.)

Options :

A : Use the show vdom command to see hidden VDOMs.

B : use the diag sys va command.

C : Ensure FortiGate port4 can resolve DNS.

D : Ensure FortiGate portl has internet access

E : Ensure IP address 169.254.169_254 is not blocked

Answer: C,D,E

Question 5

Refer to the exhibit.

You are troubleshooting a FortiGate HA floating IP issue with Microsoft Azure. After the failover, the new primary device does not have the previous primary device floating IP address. What could be the possible issue With this scenario?

Options :

A : FortiGate port4 does not have internet access.

B : A wrong client secret credential is used

C : The error is caused by credential time expiration.

D : The Azure service principle account must have a contributor role.

Answer: D

Higher Test Marks with Free Online NSE7_PBC-7.2 Exam Practice

Buying Options: