Fortinet Exam NSE7_PBC-7.2 Topic 1 Question 7 Discussion

Actual exam question for Fortinet's NSE7_PBC-7.2 exam

Question #: 7
Topic #: 1

You have been tasked with deploying FortiGate VMs in a highly available topology on the Amazon Web Services (AWS) cloud. The requirements for your deployment are as follows:

* You must deploy two FortiGate VMs in a single virtual private cloud (VPC), with an external elastic load balancer which will distribute ingress traffic from the internet to both FortiGate VMs in an active-active topology.

* Each FortiGate VM must have two elastic network interfaces: one will connect to a public subnet and other will connect to a private subnet.

* To maintain high availability, you must deploy the FortiGate VMs in two different availability zones.

How many public and private subnets will you need to configure within the VPC?

AOne public subnet and two private subnets

BTwo public subnets and one private subnet

CTwo public subnets and two private subnets

DOne public subnet and one private subnet

Show Suggested Answer

Suggested Answer: C

https://github.com/fortinet/aws-cloudformation-templates/blob/master/LambdaAA-RouteFailover/6.0/README.md

https://github.com/fortinet/aws-cloudformation-templates/tree/master/LambdaAA-RouteFailover/6.0

by Ilene at Jan 26, 2024, 06:49 AM

Limited Time Offer

25%

Off

Get Premium NSE7_PBC-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Viva

8 days ago

Yup, that sounds about right. This is a pretty classic high availability setup on AWS. As long as you configure the routing and security groups properly, you should be good to go.

upvoted 0 times

...

Annmarie

9 days ago

Ah, good point! So that would make it a total of 4 public subnets and 4 private subnets. One public and one private subnet per availability zone, plus an additional pair for the load balancer.

upvoted 0 times

...

Cassi

10 days ago

I agree with that. But we also need to consider the active-active topology requirement. Wouldn't we need an additional public subnet and private subnet to handle the load balancing?

upvoted 0 times

...

Aracelis

11 days ago

Hmm, this seems like a straightforward question. Since we need to deploy the FortiGate VMs in two different availability zones, that means we'll need at least two public subnets and two private subnets, right?

upvoted 0 times

...