Fortinet Exam NSE7_PBC-7.2 Topic 1 Question 10 Discussion

Actual exam question for Fortinet's NSE7_PBC-7.2 exam

Question #: 10
Topic #: 1

You are deploying Amazon Web Services (AWS) GuardDuty to monitor malicious or unauthorized behaviors related to AWS resources. You will also use the Fortinet aws-lambda-guardduty script to translate feeds from AWS GuardDuty findings into a list of malicious IP addresses. FortiGate can then consume this list as an external threat feed.

Which Amazon AWS services must you subscribe to in order to use this feature?

AGuardDuty, CloudWatch, S3, Inspector, WAF, and Shield.

BGuardDuty, CloudWatch, S3, and DynamoDB.

CInspector, Shield, GuardDuty, S3, and DynamoDB.

DWAF, Shield, GuardDuty, S3, and DynamoDB.

Show Suggested Answer

Suggested Answer: B

You must subscribe to GuardDuty, CloudWatch, S3, and DynamoDB. https://docs.fortinet.com/document/fortigate-public-cloud/6.4.0/aws-administration-guide/908646/populating-threat-feeds-with-guardduty

by Quentin at Mar 16, 2024, 07:14 AM

Limited Time Offer

25%

Off

Get Premium NSE7_PBC-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lenna

5 days ago

Absolutely, documentation is key. I'm sure AWS has all the details we need to set this up properly. But you know what they say, 'when in doubt, Google it out!' I bet there are some great blog posts or tutorials that can walk us through the whole process step-by-step.

upvoted 0 times

...

Carma

6 days ago

Haha, good point. You don't want to get caught with your firewall down, am I right? I think the key services are GuardDuty and Lambda, but it's always a good idea to consider any additional dependencies or integrations that might be necessary. Maybe we should check the documentation just to be sure we're not missing anything obvious.

upvoted 0 times

...

Jules

7 days ago

I agree, GuardDuty and Lambda are definitely required. But I'm also wondering if we need to subscribe to any other services, like Amazon S3 to store the malicious IP list or Amazon SNS to receive notifications from GuardDuty? Gotta cover all our bases, you know.

upvoted 0 times

...

Felix

8 days ago

Hmm, this question seems pretty straightforward. I think we need to subscribe to AWS GuardDuty and AWS Lambda for this use case. GuardDuty is the service that detects the malicious activities, and Lambda is the serverless compute service we'll use to run the Fortinet script to process the findings.

upvoted 0 times

...