Fortinet FCSS_CDS_AR-7.6 Exam Practice Test Instant Access

Question 1

As part of your organization's monitoring plan, you have been tasked with obtaining and analyzing detailed information about the traffic sourced at one of your FortiGate EC2 instances.

What can you do to achieve this goal?

AUse AWS CloudTrail to capture and then examine traffic from the EC2 instance.

BCreate a virtual public cloud (VPC) flow log at the network interface level for the EC2 instance.

CAdd the EC2 instance as a target in CloudWatch to collect its traffic logs.

DConfigure a network access analyzer scope with the EC2 instance as a match finding.

Answer : B

Question 2

A network security administrator is searching for a solution to secure traffic going in and out of the container infrastructure.

In which two ways can Fortinet container security help secure container infrastructures? (Choose two.)

AFortiGate NGFW can inspect north-south container traffic with label-aware policies.

BFortiGate NGFW and FortiWeb can be used to secure container traffic.

CFortiGate NGFW can connect to the worker nodes and protect the containers.

DFortiGate NGFW can be placed between each application container for north-south traffic inspection.

Answer : A, B

Question 3

Refer to the exhibit.

In your Amazon Web Services (AWS), you must allow inbound HTTPS access to the Customer VPC FortiGate VM from the internet. However, your HTTPS connection to the FortiGate VM in the Customer VPC is not successful.

Also, you must ensure that the Customer VPC FortiGate VM sends all the outbound internet traffic through the Security VPC.

How do you correct this issue with minimal configuration changes? (Choose three.)

AAdd a route with your local internet public IP address as the destination and the internet gateway as the target.

BAdd a route with your local internet public IP address as the destination and the transit gateway as the target.

CAdd a route to the destination 0.0.0.0/0 with the transit gateway as the target.

DDeploy an internet gateway, associate an EIP with the Customer VPC private subnet, and then add a new route with destination 0.0.0.0/0 with the internet gateway as the target.

EDeploy an internet gateway, attach it to the Customer VPC, and then associate an EIP with port1 of the FortiGate in the Customer VPC.

Answer : B, C, E

Question 4

Refer to the exhibit.

An administrator implements FortiWeb ingress controller to protect containerized web applications in an AWS Elastic Kubernetes Service (EKS) cluster.

What can you conclude about the topology shown in FortiView?

AThe FortiWeb VM gets the latest cluster information through an SDN connector.

BThis topology has two services and two ingress controllers deployed.

CBoth services will be load balanced among the two nodes and the four pods.

DAdding a new service will update the FortiWeb configuration automatically.

Answer : A

Question 5

Refer to the exhibit.

You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS. However, your connection is not successful.

Given the network topology, what can be the issue?

AThere is no connection between VPC A and VPC B.

BThere is no Internet Gateway attached to the Spoke VPC A.

CThe Transit Gateway BGP IP address is incorrect.

DThere is no Elastic IP address attached to FortiGate in the Security VPC.

Answer : B

Question 6

Refer to the exhibit.

What would be the impact of confirming to delete all the resources in Terraform?

AIt destroys all the resources tied to the AWS Identity and Access Management (IAM) user.

BIt destroys all the resources in the resource group.

CIt destroys all the resources in the state file.

DIt destroys all the resources in the .tfvars file.

Answer : C

Question 7

Refer to the exhibit.

You have deployed a Linux EC2 instance in Amazon Web Services (AWS) with the settings shown in the exhibit.

What next step must the administrator take to access this instance from the internet?

AAllocate an Elastic IP address and assign it to the instance.

BCreate a VIP on FortiGate to allow access.

CEnable SSH and allocate it to the device.

DConfigure the user name and password.

Answer : A

Fortinet FCSS_CDS_AR-7.6 FCSS - Public Cloud Security 7.6 Architect Exam Practice Test