Free Fortinet NSE7_CDS_AR-7.6 Exam Dumps Questions & Answers

Refer to the exhibit. You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS. However, your connection is not successful.
Given the network topology, what can be the issue?

• A.  There is no Elastic IP address attached to FortiGate in the Security VPC.
• B.  There is no connection between VPC A and VPC B.
• C.  The Transit Gateway BGP IP address is incorrect.
• D.  There is no Internet Gateway attached to the Spoke VPC A.

A DevOps team is configuring Terraform to deploy Amazon Web Services (AWS) resources.
They want to use environment variables to authenticate Terraform with AWS, while ensuring that the setup works across multiple developers' machines without exposing credentials in configuration files.
Which two environment variables must the team configure, at a minimum, to allow Terraform to authenticate with AWS? (Choose two.)

• A.  AWS_ACCESS_KEY_ID
• B.  AWS_SECRET_ACCESS_KEY
• C.  AWS_ACCOUNT_ID
• D.  AWS_ROLE_ARN

Refer to the exhibit. An administrator has deployed a FortiGate VM in Amazon Web Services (AWS) and is trying to access it using its public IP address from their local computer. However, the connection is not successful, and at the same time FortiGate is not receiving any HTTPS or SSH traffic to its external interface.
What should the administrator check for possible issue?

• A.  Check the FortiGate firewall policies.
• B.  Check the debug flow for any network ACLs.
• C.  Check the FortiGate instance ID.
• D.  Check the inbound rules of the security groups.

You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes. When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and Telnet traffic to the subnet.
What can you do to allow SSH traffic?

• A.  You must create two new allow SSH rules, each with a number smaller than 5.
• B.  You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.
• C.  You must create two new allow SSH rules, each with a number bigger than 5.
• D.  You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.

Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.
What is an advantage of choosing Azure Bicep over other IaC tools available?

• A.  Azure Bicep can reduce deployment costs by limiting resource utilization during testing.
• B.  Azure Bicep provides immediate support for all Azure services, including those in preview.
• C.  Azure Bicep generates deployment logs that are optimized to improve error handling.
• D.  Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates.