Fortinet Exam NSE7_PBC-7.2 Topic 1 Question 2 Discussion

Actual exam question for Fortinet's NSE7_PBC-7.2 exam

Question #: 2
Topic #: 1

You have been tasked with deploying FortiGate VMs in a highly available topology on the Amazon Web Services (AWS) cloud. The requirements for your deployment are as follows:

* You must deploy two FortiGate VMs in a single virtual private cloud (VPC), with an external elastic load balancer which will distribute ingress traffic from the internet to both FortiGate VMs in an active-active topology.

* Each FortiGate VM must have two elastic network interfaces: one will connect to a public subnet and other will connect to a private subnet.

* To maintain high availability, you must deploy the FortiGate VMs in two different availability zones.

How many public and private subnets will you need to configure within the VPC?

AOne public subnet and two private subnets

BTwo public subnets and one private subnet

CTwo public subnets and two private subnets

DOne public subnet and one private subnet

Show Suggested Answer

Suggested Answer: C

https://github.com/fortinet/aws-cloudformation-templates/blob/master/LambdaAA-RouteFailover/6.0/README.md

https://github.com/fortinet/aws-cloudformation-templates/tree/master/LambdaAA-RouteFailover/6.0

by Veronika at Nov 21, 2023, 06:33 AM

Limited Time Offer

25%

Off

Get Premium NSE7_PBC-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kindra

24 days ago

I think so. The only tricky part might be setting up the routing tables to make sure the traffic flows properly between the public and private subnets. But as long as we configure that correctly, we should be good to go.

upvoted 0 times

...

Elvera

25 days ago

Exactly. And the external elastic load balancer will distribute traffic from the internet to the public subnets, which will then route the traffic to the private subnets where the FortiGate VMs are located. Simple enough, right?

upvoted 0 times

Weldon

6 days ago

Absolutely. It's a robust design to ensure continuous operation of the FortiGate VMs.

upvoted 0 times

...

Iesha

7 days ago

This setup will definitely provide high availability for our deployment on AWS.

upvoted 0 times

...

Na

8 days ago

That's correct. It ensures both FortiGate VMs are actively handling traffic.

upvoted 0 times

...

Agustin

9 days ago

Got it. And the external elastic load balancer will make sure traffic is evenly distributed to the FortiGate VMs.

upvoted 0 times

...

Malcolm

10 days ago

Exactly, two public subnets and two private subnets spread across two availability zones.

upvoted 0 times

...

Emmanuel

11 days ago

So, that means I will need a total of four subnets, right?

upvoted 0 times

...

Valentine

12 days ago

Yes, you will need to configure one public subnet and one private subnet in each availability zone.

upvoted 0 times

...

Marvel

26 days ago

I agree. Since each FortiGate VM needs two network interfaces, one for the public subnet and one for the private subnet, that means we'll need a total of four subnets - two public and two private, one of each in each availability zone.

upvoted 0 times

...

Lea

27 days ago

Okay, let's think this through. We need two FortiGate VMs in a highly available topology, so we'll need to deploy them in two different availability zones. That means we'll need a public subnet and a private subnet in each availability zone, right?

upvoted 0 times

...