Free Fortinet NSE7_PBC-7.2 Practice Test & Real Exam Questions

Exam Code/Number: NSE7_PBC-7.2
Exam Name/Title: Fortinet NSE 7 - Public Cloud Security 7.2
Certification Provider: Fortinet
Corresponding Certification: NSE 7 Network Security Architect

Exam Questions: 91
Updated On: Jun 27, 2026

Question #1

Which two statements about Microsoft Azure network security groups are true? (Choose two.)

A. Network security groups can be applied to subnets and virtual network interfaces.

B. Network security groups can be applied to subnets only.

C. Network security groups are a stateful inbound and outbound rules used for traffic filtering.

D. Network security groups are stateless inbound and outbound rules used for traffic filtering.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #2

Which two statements are true about Transit Gateway Connect peers in anlPv4 BGP configuration'? (Choose two.)

A. You must specify a /29CIDR block from the 169.254.0.0/16 range

B. The inside CIDR blocks are used for BGP peering

C. You must configure the second address from the IPv4 range on the device as the BGP IP address

D. You cannot use IPv6 addresses

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #3

Refer to Exhibit. The exhibit shows the Connect Peers settings on Amazon Web Services (AWS) transit gateway attachments with two FortiGate VMS in a security VPC.

Which two statements are correct? (Choose two.)

A. The peer GRE address is the FortiGate external interface IP address.

B. The Transit Gateway GRE address is auto-generated

C. The Peer GRE address is the FortiGate internal interface IP address

D. The BGP inside CIDR blocks can be any CIDR block with /29

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #4

Which two Amazon Web Services (AWS) topologies support east-west traffic inspection within the AWS cloud by the FortiGate VM? (Choose two.)

A. A multiple VPC deployment utilizing a transit VPC topology

B. A single VPC deployment with multiple subnets

C. A single VPC deployment with multiple subnets and a NAT gateway

D. A multiple VPC deployment utilizing a transit gateway

Discussion 0

Correct Answer: A,D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #5

Refer to the exhibit. You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS.

However, your connection is not successful.
Given the network topology, what can be the issue?

A. There is no connection between VPC A and VPC B.

B. There is no elastic IP address attached to FortiGate in the Security VPC.

C. There is no internet gateway attached to the Spoke VPC A.

D. The Transit Gateway BGP IP address is incorrect.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #6

Which two statements about Amazon Web Services (AWS) networking are correct? (Choose two.)

A. Multicast traffic is not allowed.

B. 802.1q VLAN tags are allowed inside the same virtual private cloud.

C. AWS DNS reserves the first host IP address of each subnet.

D. Proxy ARP entries are disregarded.

Discussion 0

Correct Answer: A,D Vote an answer

Question #7

Refer to the exhibit. An administrator deployed an HA active-active load balance sandwich in Microsoft Azure. The setup requires configuration synchronization between devices.

What are two outcomes from the configured settings? (Choose two.)

A. It does not synchronize the FortiGate hostname

B. FortiGate A and FortiGate B are two independent devices.

C. FortiGate-VM instances are scaled out automatically according to predefined workload levels.

D. By default, FortiGate uses FGCP

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #8

A Network security administrator is searching for a solution to secure traffic going in and out of the container infrastructure.
In which two ways can Fortinet container security help secure container infrastructure? (Choose two.)

A. FortiGate NGFW can connect to the worker node and protects the container-

B. FortiGate NGFW can be placed between each application container for north-south traffic inspection

C. FortiGate NGFW and FortiSandbox can be used to secure container traffic

D. FortiGate NGFW can inspect north-south container traffic with label aware policies

Discussion 0

Correct Answer: C,D Vote an answer

Explanation: Only visible for Pass4Leader members. You can sign-up / login (it's free).

Question #9

Refer to the exhibit. A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Web servers to the Internet. The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface.

What are two possible reasons for this behavior? (Choose two.)

A. AWS security groups may be blocking the traffic.

B. The Internet gateway (IGW) is not added to VPC (virtual private cloud).

C. AWS source and destination checks are enabled on the FortiGate interfaces.

D. The web servers are not configured with the default gateway.

Discussion 0

Correct Answer: A,C Vote an answer

Question #10

Which statement about FortiSandbox in Amazon Web Services (AWS) is true?

A. FortiSandbox in AWS uses Windows virtual machines (VMs) to inspect files.

B. In AWS, virtual machines (VMs) that inspect files are constantly up and running.

C. In AWS, virtual machines (VMs) that inspect files do not have to be reset after inspecting a file.

D. FortiSandbox in AWS can have a maximum of eight virtual machines (VMs) that inspect files.

Discussion 0

Correct Answer: A Vote an answer

Download Free Fortinet NSE7_PBC-7.2 Demo

Simply submit your e-mail address below to get started with our free demo of your Fortinet NSE7_PBC-7.2 exam.