Fortinet FCP_WCS_AD-7.4 - FCP - AWS Cloud Security 7.4 Administrator Exam
Page: 2 / 12
Total 57 questions
Question #6 (Topic: Exam A)
Refer to the exhibit.
A customer is using the AWS Elastic Load Balancer (ELB).
Which two statements are correct about the ELB configuration? (Choose two.)
A customer is using the AWS Elastic Load Balancer (ELB).
Which two statements are correct about the ELB configuration? (Choose two.)
A. The load balancer is configured to load balance traffic among multiple availability zones.
B. The Amazon Resource Name is used to access the load balancer node and targets.
C. You can use the DNS name to reach the targets behind the ELB.
D. The load balancer is configured for the internal traffic of the virtual public cloud (VPC).
Answer: AC
Question #7 (Topic: Exam A)
Which two statements about the FortiCloud portal are true? (Choose two.)
A. You can gain remote access to your FortiGate VM directly from the portal.
B. To assign permissions in the identity and access management (IAM) portal, you must write a JSON script.
C. You can access the FortiFlex portal only after you purchase a FortiFlex license and register it on FortiCare.
D. You can access only cloud services that you have subscribed to on AWS marketplace.
Answer: AC
Question #8 (Topic: Exam A)
Which three statements correctly describe FortiGate Cloud-Native Firewall (CNF)? (Choose three.)
A. It provides carrier-grade protection.
B. It scales seamlessly.
C. It uses AWS Elastic Load Balancing (ELB).
D. It is considered to be a Firewall-as-a-Service (FWaaS).
E. It can be managed by FortiManager and AWS firewall manager.
Answer: ABD
Question #9 (Topic: Exam A)
AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.
Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)
Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)
A. Higher VPN throughput
B. Web filtering
C. OSPF over IPSec
D. Advanced dynamic routing
E. Secure SD-WAN with application visibility
Answer: BCE
Question #10 (Topic: Exam A)
Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)
A. For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
B. A-A clusters rely on API calls for failovers.
C. A-A clusters always require a load balancer.
D. A-A clusters can use a software-defined network (SDN) to perform a failover.
Answer: AC
