Fortinet FCSS - Public Cloud Security 7.6 Architect - FCSS_CDS

QUESTION NO: 1
An administrator is relying on an Azure Bicep linter to find possible issues in Bicep files.
Which problem can the administrator expect to find?

A. The resources to be deployed exceed the quota for a region. B. One or more modules are not using runtime values as parameters. C. Some resources are missing dependsOn statements. D. There are output statements that contain passwords.

Correct Answer: C

QUESTION NO: 2
Refer to the exhibit.

Refer to the exhibit.
You deployed a FortiGate HA active-passive cluster in Microsoft Azure.
Which two statements regarding this particular deployment are true? (Choose two.)

A. There is no SLA for API calls from Microsoft Azure. B. You can use the vim-exception command to synchronize the configuration. C. During a failover, all existing sessions are transferred to the new active FortiGate. D. The configuration does not synchronize between the primary and secondary devices.

Correct Answer: A,C

QUESTION NO: 3
Which Azure and AWS services can be used to collect, analyze, and visualize logs?
(Choose two.)
Response:

A. Azure Log Analytics B. AWS Lambda C. AWS CloudTrail D. AWS Auto Scaling

Correct Answer: A,C

QUESTION NO: 4
Which two statements about the Amazon Web Services (AWS) security groups are true?
(Choose two.)
Response:

A. Configured traffic rules may have an action of allow or deny. B. Security groups are applicable at the instance level. C. EC2 instances, elastic network interfaces (ENIs), and subnets may have security groups configured on them. D. A security group is a stateful list of ingress and egress traffic rules.

Correct Answer: B,D

QUESTION NO: 5
Refer to the exhibit.

Refer to the exhibit.
After analyzing the native monitoring tools available in Azure, an administrator decides to use the tool displayed in the exhibit.
Why would an administrator choose this tool?

A. To view details about Azure resources and their relationships across multiple regions. B. To compare the latency of an on-premises site with the latency of an Azure application. C. To help debug issues affecting virtual network gateways. D. To obtain, and later examine, traffic flow data with a visualization tool.

Correct Answer: B

QUESTION NO: 6
Refer to the exhibit.

Refer to the exhibit.
A Managed Security Service Provider (MSSP) administration team is trying to deploy a new HA cluster in Azure to filter traffic to and from a client that is also using Azure. However, every deployment attempt fails, and only some of the resources are deployed successfully. While troubleshooting this issue, the team runs the command shown in the exhibit.
What are the implications of the output of the command?

A. The team will not be able to deploy an active-passive (A-P) FortiGate high availability (HA) cluster with SDN connector. B. The team will not be able to deploy an A-P FortiGate HA cluster with Azure Load Balancer. C. The team will not be able to deploy an active-active (A-A) FortiGate HA cluster with Azure Load Balancer. D. The team will not be able to deploy an A-P FortiGate HA cluster with Azure Gateway Load Balancer.

Correct Answer: C

QUESTION NO: 7
Which AWS service can simulate network paths to troubleshoot connectivity issues?
(Choose two.)
Response:

A. AWS Network Manager B. AWS Reachability Analyzer C. AWS Config D. AWS CloudTrail

Correct Answer: A,B

QUESTION NO: 8
Which Fortinet products can be used to protect containerized applications in a cloud environment?
(Choose two.)
Response:

A. FortiSandbox B. FortiADC C. FortiADC D. FortiWeb

Correct Answer: B,D

QUESTION NO: 9
A network security administrator is searching for a solution to secure traffic going in and out of the container infrastructure.
In which two ways can Fortinet container security help secure container infrastructures? (Choose two.)

A. FortiGate NGFW can connect to the worker nodes and protect the containers. B. FortiGate NGFW and FortiWeb can be used to secure container traffic. C. FortiGate NGFW can inspect north-south container traffic with label-aware policies. D. FortiGate NGFW can be placed between each application container for north-south traffic inspection.

Correct Answer: B,C

QUESTION NO: 10
An administrator is trying to implement FortiCNP with Microsoft Azure Security integration. However, FortiCNP is not able to extract any cloud integration data from Azure; therefore, real-time cloud security monitoring is not possible.
What is causing this issue?

A. The administrator enabled the wrong Defender plan for servers. B. The organization is using a free Azure AD license. C. The Azure account doesn't have the Global Administrator role. D. The FortiCNP account in Azure has the Storage Blob Data Reader role.

Correct Answer: D

Fortinet FCSS - Public Cloud Security 7.6 Architect - FCSS_CDS_AR-7.6 Exam Questions