Exam NSE7_PBC-6.4 topic 1 question 20 discussion

Actual exam question from Fortinet's NSE7_PBC-6.4

Question #: 20
Topic #: 1

You have previously deployed an Amazon Web Services (AWS) transit virtual private cloud (VPC) with a pair of FortiGate firewalls (VM04 / c4.xlarge) as your security perimeter. You are beginning to see high CPU usage on the FortiGate instances.
Which action will fix this issue?

A. Convert the c4.xlarge instances to m4.xlarge instances.
B. Migrate the transit VPNs to new and larger instances (VM08 / c4.2xlarge).
C. Convert from IPsec tunnels to generic routing encapsulation (GRE) tunnels, for the VPC peering connections.
D. Convert the transit VPC firewalls into an auto-scaling group and launch additional EC2 instances in that group.

Show Suggested Answer

Suggested Answer: D 🗳️

by kinge2 at July 19, 2022, 11:52 a.m.

Comments

Submit Cancel

FortiLeo

2 years, 4 months ago

I think the answer is B because the question references Transit VPC which is the older architecture to Transit Gateway. In Transit VPC the deployment is usually 2 virtual FortiGates and it you have performance issues, you have to redeploy larger instances. For Transit Gateway, you can use autoscaling.

upvoted 1 times

...

charruco

2 years, 7 months ago

Selected Answer: D

D is correct Multiple FortiGate-VM instances form an Auto Scaling group to provide highly efficient clustering at times of high workloads. FortiGate-VM instances can be scaled out automatically according to predefined workload levels. https://docs.fortinet.com/document/fortigate-public-cloud/6.2.0/aws-administration-guide/397979/deploying-auto-scaling-on-aws

upvoted 1 times

...

kinge2

3 years ago

Selected Answer: D

auto scaling will do

upvoted 2 times

...