最新的Fortinet Certified Solution Specialist認證 FCSS_CDS_AR-7.6考試題庫

問題1

An Azure administration team is looking for a FortiGate high availability (HA) solution that is able to:
- Filter east-west traffic
- Filter north-south traffic
- Scale up
- Scale out
Which HA deployment meets all of the requirements?

A. Active-passive with SDN connector

B. Active-active with external and internal load balancers

C. Active-passive with external and internal load balancers

D. Active-active with Azure Gateway load balancer

正確答案: B

問題2

You are experiencing intermittent connectivity issues in a FortiGate HA cluster deployed with Azure gateway load balancer. Traffic is being dropped when it passes through the cluster.
What is the cause of the issue?

A. The protected VMs are running an application that fragments packets.

B. The Azure gateway load balancer is configured with an incorrect health probe port.

C. The Azure gateway load balancer is blocking large packets, causing traffic failures.

D. The FortiGate firewalls are using the default maximum transmission unit (MTU) size supported by Azure.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題3

Refer to the exhibit. You have deployed a Linux EC2 instance in Amazon Web Services (AWS) with the settings shown on the exhibit.
What step must the administrator take to access this instance from the internet?

A. Configure the user name and password.

B. Allocate an Elastic IP address and assign it to the instance.

C. Create a NAT gateway associated with the terraform-subnet.

D. Enable SSH and allocate it to the device.

正確答案: B

說明：（僅 VCESoft 成員可見）

問題4

Refer to the exhibit. An administrator is trying to deploy a FortiGate VM in Microsoft Azure using Terraform. However, during the configuration, the Azure client secret is no longer visible in the Azure portal.
How would the administrator obtain the Azure client secret to configure on Terraform?

A. Log in to the Azure CLI as a power user to obtain the client secret.

B. Use the Terraform output file values to obtain the client secret.

C. Create a new client secret and take note of it.

D. Create a new Azure account and assign it the Administrator role.

正確答案: C

說明：（僅 VCESoft 成員可見）

問題5

Your monitoring team reports performance issues with a web application hosted in Azure. You suspect that the bottleneck might be due to unexpected inbound traffic spikes. Which method should you use to identify and analyze the traffic pattern?

A. Enable NSG Flow Logs and analyze logs with Azure Monitor.

B. Enable Azure DDoS protection to prevent inbound traffic spikes.

C. Use Azure Traffic Manager to visualize all traffic to the application.

D. Deploy Azure Firewall to log traffic by IP address.

正確答案: A

說明：（僅 VCESoft 成員可見）

問題6

Refer to the exhibit. You are troubleshooting a FortiGate HA floating IP issue with Microsoft Azure. After the failover, the new primary device does not have the previous primary device floating IP address.
What could be the possible issue with this scenario?

A. A wrong client secret credential is used.

B. FortiGate port4 does not have internet access.

C. The error is caused by credential time expiration.

D. The Azure service principal account must have a contributor role.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題7

An Azure administrator is trying to optimize the Azure Bicep files currently used for cloud deployments.
Which technique can Azure administrators use to improve the code in Azure Bicep files?

A. Avoid nesting related resources to improve readability.

B. Use the what-ifoperation before deploying new resources.

C. Always use parameter files with the .jsonextension.

D. Limit the allowed parameters with the use of decorators.

正確答案: D

說明：（僅 VCESoft 成員可見）

問題8

Refer to the exhibit. In which type of FortiCNP insights can an administrator examine the findings triggered by this policy?

A. Data

B. Threat

C. User activity

D. Risk

正確答案: B

說明：（僅 VCESoft 成員可見）

最新的Fortinet FCSS - Public Cloud Security 7.6 Architect - FCSS_CDS_AR-7.6免費考試真題

最新更新

站內鏈接

聯系我們