FCSS - Public Cloud Security 7.6 Architect - FCSS_CDS

Question 1

Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments.
What is an advantage of choosing Azure Bicep over other IaC tools available?

A. Azure Bicep provides immediate support for all Azure services, including those in preview.

B. Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates.

C. Azure Bicep can reduce deployment costs by limiting resource utilization during testing.

D. Azure Bicep generates deployment logs that are optimized to improve error handling.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

You are experiencing intermittent connectivity issues in a FortiGate HA cluster deployed with Azure gateway load balancer. Traffic is being dropped when it passes through the cluster.
What is the cause of the issue?

A. The Azure gateway load balancer is blocking large packets, causing traffic failures.

B. The Azure gateway load balancer is configured with an incorrect health probe port.

C. The FortiGate firewalls are using the default maximum transmission unit (MTU) size supported by Azure.

D. The protected VMs are running an application that fragments packets.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

How does an administrator secure container environments in Amazon AWS from newly emerged security threats?

A. Using Amazon AWS-related application control signatures.

B. Using distributed network-related application control signatures.

C. Using Amazon AWS_S3-related application control signatures.

D. Using Docker-related application control signatures.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

You have deployed a FortiGate HA cluster in Azure using a Gateway Load Balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.
What can be the cause of the issue?

A. The Fortinet VMs have IP forwarding disabled, which is required for traffic inspection.

B. The Gateway Load Balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through.

C. The health probes for the Gateway Load Balancer are failing, which causes traffic to bypass the HA cluster.

D. The protected VMs are in a different Azure subscription, which prevents the Gateway Load Balancer from forwarding traffic.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

An administrator would like to use FortiCNP to keep track of sensitive data files located in the Amazon Web Services (AWS) S3 bucket and protect it from malware. Which FortiCNP feature should the administrator use?

A. FortiCNP Data Scan policies

B. FortiCNP Threat Detection policies

C. FortiCNP Risk Management policies

D. FortiCNP Compliance policies

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit. After analyzing the native monitoring tools available in Azure, an administrator decides to use the tool displayed in the exhibit.
Why would an administrator choose this tool?

A. To obtain, and later examine, traffic flow data with a visualization tool.

B. To help debug issues affecting virtual network gateways.

C. To view details about Azure resources and their relationships across multiple regions.

D. To compare the latency of an on-premises site with the latency of an Azure application.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit. What is the purpose of this section of an Azure Bicep file?

A. To add a comment with the permitted FortiOS versions that can be deployed

B. To document the FortiOS versions in the resulting topology

C. To restrict which FortiOS versions are accepted for deployment

D. To indicate the correct FortiOS upgrade path after deployment

Correct Answer: C

Question 8

Refer to the exhibit. You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure. After the deployment, you prefer to use FGSP to synchronize sessions and allow asymmetric return traffic. In the environment, FortiGate port 1 and port 2 are facing external and internal load balancers respectively.
What IP address must you use in the peering configuration?

A. The internal load balancer port 1 IP address.

B. The public load balancer port 2 IP address.

C. The opposite FortiGate port 2 IP address.

D. The opposite FortiGate port 1 IP address.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Fortinet FCSS - Public Cloud Security 7.6 Architect - FCSS_CDS_AR-7.6 Exam Practice Test

Latest Update

Useful Links

Contact Us