NSE7_PBC-6.4 Exam Questions and Answers

QUESTION: 6

Refer to the exhibit.

You are deploying a FortiGate-VM in Microsoft Azure using the PAYG/On-demand licensing model. After you configure the FortiGate-VM, the validation process fails, displaying the error shown in the exhibit.

What caused the validation process to fail?

You selected the incorrect resource group.
You selected the Bring Your Own License (BYOL) licensing mode.
You selected the PAYG/On-demand licensing model, but did not select correct virtual machine size.
You selected the PAYG/On-demand licensing model, but did not associate a valid Azure subscription.

Answer(s): A

Reveal Solution Next Question

QUESTION: 7

An Amazon Web Services (AWS) auto-scale FortiGate cluster has just experienced a scale-down event, terminating a FortiGate in availability zone C.

This has now black-holed the private subnet in this availability zone.
What action will the worker node automatically perform to restore access to the black-holed subnet?

The worker node applies a route table from a non-black-holed subnet to the black-holed subnet.
The worker node moves the virtual IP of the terminated FortiGate to a running FortiGate on the worker node's private subnet interface.
The worker node modifies the route table applied to the black-holed subnet changing its default route to point to a running FortiGate on the worker node's private subnet interface.
The worker node migrates the subnet to a different availability zone.

Answer(s): D

Reveal Solution Next Question

QUESTION: 8

Which two statements about the Amazon Cloud Services (AWS) network access control lists (ACLs) are true? (Choose two.)

Network ACLs are stateless, and inbound and outbound rules are used for traffic filtering.
Network ACLs are stateful, and inbound and outbound rules are used for traffic filtering.
Network ACLs must be manually applied to virtual network interfaces.
Network ACLs support allow rules and deny rules.

Answer(s): A,D

Reference:

https://docs.aws.amazon.com/vpc/latest/userguide/vpc-network-acls.html

Reveal Solution Next Question

QUESTION: 9

When an organization deploys a FortiGate-VM in a high availability (HA) (active/active) architecture in Microsoft Azure, they need to determine the default timeout values of the load balancer probes.

In the event of failure, how long will Azure take to mark a FortiGate-VM as unhealthy, considering the default timeout values?

Less than 10 seconds
30 seconds
20 seconds
16 seconds

Answer(s): B

Reveal Solution Next Question

QUESTION: 10

Which three properties are configurable Microsoft Azure network security group rule settings? (Choose three.)

Action
Sequence number
Source and destination IP ranges
Destination port ranges
Source port ranges

Answer(s): A,D,E

Reference:

https://docs.microsoft.com/en-us/azure/virtual-network/network-security-groups-overview

Reveal Solution Next Question

Fortinet NSE7_PBC-6.4 Exam (page: 2) Fortinet NSE 7 - Public Cloud Security 6.4 Updated on: 12-Feb-2026

QUESTION: 6

QUESTION: 7

QUESTION: 8

Reference:

QUESTION: 9

QUESTION: 10

Reference:

Fortinet NSE7_PBC-6.4 Exam (page: 2)
Fortinet NSE 7 - Public Cloud Security 6.4
Updated on: 12-Feb-2026