Fortinet Exam NSE7_PBC-7.2 Topic 1 Question 4 Discussion

Actual exam question for Fortinet's NSE7_PBC-7.2 exam

Question #: 4
Topic #: 1

You are deploying Amazon Web Services (AWS) GuardDuty to monitor malicious or unauthorized behaviors related to AWS resources. You will also use the Fortinet aws-lambda-guardduty script to translate feeds from AWS GuardDuty findings into a list of malicious IP addresses. FortiGate can then consume this list as an external threat feed.

Which Amazon AWS services must you subscribe to in order to use this feature?

AGuardDuty, CloudWatch, S3, Inspector, WAF, and Shield.

BGuardDuty, CloudWatch, S3, and DynamoDB.

CInspector, Shield, GuardDuty, S3, and DynamoDB.

DWAF, Shield, GuardDuty, S3, and DynamoDB.

Show Suggested Answer

Suggested Answer: B

You must subscribe to GuardDuty, CloudWatch, S3, and DynamoDB. https://docs.fortinet.com/document/fortigate-public-cloud/6.4.0/aws-administration-guide/908646/populating-threat-feeds-with-guardduty

by Vi at Nov 26, 2023, 05:32 AM

Limited Time Offer

25%

Off

Get Premium NSE7_PBC-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jean

8 days ago

Haha, good one. But seriously, this seems like a pretty standard setup for using GuardDuty with a third-party tool. As long as you've got the right services enabled and permissions in place, you should be good to go.

upvoted 0 times

...

Theron

9 days ago

Absolutely. And don't forget, you'll also need to make sure your IAM permissions are set up correctly to allow GuardDuty and Lambda to work together. Wouldn't want any 'unauthorized behaviors' of our own, am I right?

upvoted 0 times

...

Reuben

10 days ago

Yeah, that's my understanding too. GuardDuty for the security monitoring, and Lambda to run the script that translates the findings into the threat feed.

upvoted 0 times

...

Pamella

11 days ago

Hmm, this question seems straightforward. We'll need to subscribe to AWS GuardDuty and Lambda services to use the Fortinet aws-lambda-guardduty script, right?

upvoted 0 times

...