Fortinet Exam NSE7_PBC-7.2 Topic 1 Question 9 Discussion

Actual exam question for Fortinet's NSE7_PBC-7.2 exam

Question #: 9
Topic #: 1

You have been tasked with deploying FortiGate VMs in a highly available topology on the Amazon Web Services (AWS) cloud. The requirements for your deployment are as follows:

* You must deploy two FortiGate VMs in a single virtual private cloud (VPC), with an external elastic load balancer which will distribute ingress traffic from the internet to both FortiGate VMs in an active-active topology.

* Each FortiGate VM must have two elastic network interfaces: one will connect to a public subnet and other will connect to a private subnet.

* To maintain high availability, you must deploy the FortiGate VMs in two different availability zones.

How many public and private subnets will you need to configure within the VPC?

AOne public subnet and two private subnets

BTwo public subnets and one private subnet

CTwo public subnets and two private subnets

DOne public subnet and one private subnet

Show Suggested Answer

Suggested Answer: C

https://github.com/fortinet/aws-cloudformation-templates/blob/master/LambdaAA-RouteFailover/6.0/README.md

https://github.com/fortinet/aws-cloudformation-templates/tree/master/LambdaAA-RouteFailover/6.0

by Carlee at Mar 07, 2024, 02:01 AM

Limited Time Offer

25%

Off

Get Premium NSE7_PBC-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lezlie

11 hours ago

That makes sense, since each FortiGate VM needs to have one interface in the public subnet and one in the private subnet.

upvoted 0 times

...

Jesus

1 days ago

I think we will need 1 public and 1 private subnet for each FortiGate VM.

upvoted 0 times

...

Chantay

23 days ago

Haha, yeah, no kidding! Can you imagine if one of the subnets was too small and couldn't handle the traffic? The FortiGates would be like 'Sorry, we're at capacity, you're on your own buddy!' Not a great high availability setup. *chuckles*

upvoted 0 times

Vanda

6 days ago

Definitely. We don't want any capacity issues impacting our high availability setup.

upvoted 0 times

...

Glenn

7 days ago

Good point. It's important to ensure our subnets can handle the traffic load.

upvoted 0 times

...

Becky

8 days ago

Exactly. And we'll spread the FortiGate VMs across two availability zones for high availability.

upvoted 0 times

...

Whitley

9 days ago

So, in total, we'll have four subnets altogether.

upvoted 0 times

...

Marshall

10 days ago

That's correct. Each FortiGate VM will connect to one public and one private subnet.

upvoted 0 times

...

Rodrigo

12 days ago

We need two public subnets and two private subnets.

upvoted 0 times

...

Shawnda

24 days ago

Yep, that makes sense. The only thing I'd add is that it's important to make sure the subnets are properly sized and routed to support the high availability setup. Don't want any bottlenecks or single points of failure there.

upvoted 0 times

...

Berry

26 days ago

I agree with your analysis, Regenia. The requirement to have the FortiGate VMs in two different availability zones means we need to have duplicate public and private subnets in each zone. So the answer is four subnets - two public and two private.

upvoted 0 times

...

Regenia

27 days ago

Okay, let's think this through step-by-step. We need to deploy two FortiGate VMs in a single VPC, with an external load balancer distributing traffic to them in an active-active topology. Each FortiGate VM needs two network interfaces - one in a public subnet and one in a private subnet. And we need to deploy the VMs in two different availability zones to maintain high availability. So, the key thing I see is that we need a total of four subnets - two public and two private, one of each in each availability zone.

upvoted 0 times

...