View all questions & answers for the NSE 7 - Public Cloud Security 7.6.4 Architect Exam Materials exam

NSE 7 - Public Cloud Security 7.6.4 Architect Exam Materials - Question #26 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibit. You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services (AWS). You examined the variables.tf file. Assume that all the other terraform files are in place. What will be the final result after running the terraform init and terraform apply commands? (Choose one answer)

  • A. Terraform will not deploy a FortiGate VM.
  • B. Terraform will deploy a FortiGate VM in the eu-West-1a availability zone without any subnets.
  • C. Terraform will deploy a FortiGate VM in the eu-West-1 region with private and public subnets.
  • D. Terraform will deploy a FortiGate VM in the eu-West-1a availability zone with two subnets and BYOL license.
Correct Answer: A

Brave-Dump Community Votes

Answer: A (3 votes) 75%
Answer: C (1 vote) 25%

Community Explanations & Comments (4)

Andreas Andreou 1 year ago
Selected: C
Study Guide P66-69
Brave-Dumps.com Admin 1 year ago
Thank you, dear Andreas.
alex silva 1 year ago
Selected: A
In a real AWS deployment, you cannot mix a license type with an incompatible AMI image. Terraform Apply will attempt to create the resource using the provided values, the BYOL license, and the PAYG AMI. AWS will reject this combination, and the deployment will fail with a validation error.
I still believe the answer is A.
Anonymous User 4 months ago
Selected: A
I'm with Alex on this one, answer should be A.

It is really suspicious that they explicitly added the comment "AMIs are for FGTVM-AWS(PAYG) - 7.6.0" after defining "license_type = byol".

If fgtvmami points to PAYG AMI while the license_type is BYOL, AWS marketplace will detect the incompatibility and deployment will fail.
Anonymous User 1 week ago
Selected: A
I think it's A, but for another reason: the vpc subnet definition is 10.2.0.0/16, but the two subnets defined for private and public are starting with 10.1.x.y/24 and do not match the vpc, thus an error will be shown.