最新的 Public Cloud Security FCP_GCS_AD-7.6 免費考試真題:

1. Refer to the exhibit.

An administrator is troubleshooting network connectivity issues between two VMs deployed in Google Cloud.
One VM is a FortiGate located in the subnet "wan" that is part of the VPC "e-commerce". The other VM is a Windows server located in subnet "servers", which is also in the "e-commerce" VPC.
What are two reasons you cannot pint the Windows server from FortiGate? (Choose two.)

A) The default Google Cloud firewall policy does not allow this traffic.
B) ICMP traffic is blocked between Google Cloud subnets by default.
C) The Windows firewall is blocking the traffic.
D) Add a Google Cloud firewall rule to allow ICMP traffic inbound to the Windows firewall VM.

2. Refer to the exhibit.

An organization has four virtual private cloud networks and deployed a FortiGate to protect the VPCs.
FortiGate is configured with four network interfaces and each network interface is assigned one of the four VPCs.
The organization is expanding and plans to add two more VPCs.
Which two options can the organization use to support the two new VPCs? (Choose two.)

A) Modifying the FortiGate configuration to add two more network interfaces
B) Utilizing VPC peering
C) Adding a second FortiGate and configuring both FortiGate devices as an active-active high-availability cluster.
D) Deleting FortiGate and replacing it with a Google Cloud machine type that supports six network interfaces

3. An administrator is tasked to deploy two FortiGate devices in two different zoned to achieve geographical redundancy.
Which two architectural considerations must the administrator address? (Choose two.)

A) The FortiGate devices cannot be assigned the second IP address in the subnets that they are deployed in.
B) The FortiGate devices must be deployed in two different regions.
C) The FortiGate devices can be deployed in the same subnet.
D) The FortiGate devices must not be deployed in the same VPC.

4. Refer to the exhibit.

Which three conclusions can you draw from the Google Cloud custom route? (Choose three.)

A) A health check was created.
B) A group-based passthrough network load balancer was created.
C) At least one instance group was created.
D) Atarget pool-based passthrough network load balancer was created.
E) The next hop must be updates manually in the custom route if the current next hop goes down.

問題與答案：