NSE7 Public Cloud Security Practice Questions & Answers • ExamPrepare

19 questions in this view

Page 1 of 4

Question 1

Refer to the exhibit A senior administrator in a multinational organization needs to include a comment

in the template shown in the exhibit to ensure that administrators from other regions change the EC2 instance size value to one that meets the requirements in their local deployments.

How can the administrator add the comment in that section of the file?

The administrator must update the AWSTemplateFormatVersion to a more current version.
The administrator can add the comment with the # character next to the InstanceType section.
The administrator must convert the template to JSON format before adding the comment.
The administrator can run the aws cloudformation update-stack and include the comment.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 2

Refer to the exhibit.

You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS. However, your connection is not successful.

Given the network topology, what can be the issue?

Network Topology

The Transit Gateway BGP IP address is incorrect.
There is no internet gateway attached to the Spoke VPC A.
There is no connection between VPC A and VPC B.
There is no elastic IP address attached to FortiGate in the Security VPC.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 3

How can the FortiCNAPP SmartFix feature assist security teams in handling vulnerabilities and code security?

SmartFix can aggregate multiple alerts into a single, prioritized view to reduce alert fatigue.
SmartFix can directly apply fixes to supported code repositories using APIs.
SmartFix can suggest automated remediation steps for identified misconfigurations and vulnerabilities.
SmartFix can list all possible versions with their known security issues and recommend the closest version that is free of vulnerabilities.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 4

An organization is deploying FortiDevSec to enhance security for containerized applications, and they need to ensure containers are monitored for suspicious behavior at runtime.

Which FortiDevSec feature is best for detecting runtime threats?

FortiDevSec software composition analysis (SCA)
FortiDevSec dynamic application security testing (DAST)
FortiDevSec container scanner
FortiDevSec static application security testing (SAST)

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 5

What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD-WAN?

It eliminates the use of ECMP.
You can use GRE-based tunnel attachments.
You can combine it with IPsec to achieve higher bandwidth.
You can use BGP over IPsec for maximum throughput.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.

Question 6

Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.

What is an advantage of choosing Azure Bicep over other IaC tools available?

Azure Bicep can reduce deployment costs by limiting resource utilization during testing.
Azure Bicep provides immediate support for all Azure services, including those in preview.
Azure Bicep generates deployment logs that are optimized to improve error handling.
Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates.

Select an answer above, then submit your vote. Reading or practicing does not cast a vote.