FCSS_CDS_AR-7.6 Fortinet Exam Questions and Free Practice Test

Question 7

Refer to the exhibit.
FCSS_CDS_AR-7.6 dumps exhibit
Refer to the exhibit.
You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure.
After the deployment, you prefer to use FGSP to synchronize sessions and allow asymmetric return
traffic. In the environment, FortiGate port 1 and port 2 are facing external and internal load balancers
respectively.
What IP address must you use in the peering configuration?

A. The opposite FortiGate port 2 IP address.

B. The public load balancer port 2 IP address.

C. The internal load balancer port 1 IP address.

D. The opposite FortiGate port 1 IP address.

Correct Answer:D

Question 8

Refer to the exhibit.
FCSS_CDS_AR-7.6 dumps exhibit
In your Amazon Web Services (AWS), you must allow inbound HTTPS access to the Customer VPC
FortiGate VM from the internet. However, your HTTPS connection to the FortiGate VM in the Customer
VPC is not successful.
Also, you must ensure that the Customer VPC FortiGate VM sends all the outbound Internet traffic through
the Security VPC.
How do you correct this issue with minimal configuration changes? (Choose three.)

A. Add a route with your local internet public IP address as the destination and the internet gateway as thetarget.

B. Add a route with your local internet public IP address as the destination and the transit gateway as thetarget.

C. Add a route to the destination 0.0.0.0/0 with the transit gateway as the target.

D. Deploy an internet gateway, associate an EIP with the Customer VPC private subnet, and then add a new route with destination 0.0.0.0/0 with the internet gateway as the target.

E. Deploy an internet gateway, attach it to the Customer VPC, and then associate an EIP with the port1 ofthe FortiGate in the Customer VPC.

Correct Answer:BCE

Question 9

Refer to the exhibit.
FCSS_CDS_AR-7.6 dumps exhibit
An administrator implements FortiWeb ingress controller to protect containerized web applications in an AWS Elastic Kubernetes Service (EKS) cluster.
What can you conclude about the topology shown in FortiView?
A. The FortiWeb VM gets the latest cluster information through an SDN connector.
FCSS_CDS_AR-7.6 dumps exhibit B. This topology has two services and two ingress controllers deployed.
C. Both services will be load balanced among the two nodes and the four pods.
D. Adding a new service will update the FortiWeb configuration automatically.

Correct Answer:A

Question 10

An organization is deploying FortiDevSec to enhance security for containerized applications, and they need to ensure containers are monitored for suspicious behavior at runtime.
Which FortiDevSec feature is best for detecting runtime threats?

A. FortiDevSec Software Composition Analysis (SCA)

B. FortiDevSec Static Application Security Testing (SAST)

C. FortiDevSec Dynamic Application Security Testing (DAST)

D. FortiDevSec Container Scanner

Correct Answer:C

Question 11

An AWS administrator must ensure that each member of the cloud deployment team has the correct permissions to deploy and manage resources using CloudFormation. The administrator is researching which tasks must be executed with CloudFormation and therefore require CloudFormation permissions.
Which task is run using CloudFormation?

A. Deploying a new pod with a service in an Elastic Kubernetes Service (EKS) cluster using the kubectl command

B. Installing a Helm chart to deploy a FortiWeb ingress controller in an EKS cluster

C. Creating an EKS cluster with the eksctl create cluster command

D. Changing the number of nodes in a EKS cluster from AWS CloudShell

Correct Answer:D

START FCSS_CDS_AR-7.6 EXAM