Fortinet FCP_GCS_AD-7.6 Exam Questions

Question 6 of 35

An organization is planning to deploy two FortiGate VMs in two different regions.
Which two Google Cloud core components can span both FortiGate VMs in both regions? (Choose two.)

Google Cloud virtual private cloud

Google Cloud zone

Google Cloud project

Google Cloud subnet

Correct Answer: A, C

Question 7 of 35

Your organization has deployed an active-active high-availability (HA) FortiGate cluster in Google Cloud. You have noticed a significant increase in asymmetrical traffic flow.
Which two actions can you take to mitigate the issue? (Choose two.)

Enable source NAT for ingress traffic.

Enable symmetric hashing on the external load balancer.

Enable the layer 3 unified threat management (UTM) scanning feature if the FortiGate devices are on ForiOS 6.4 or later.

Enable destination NAT for ingress traffic.

Correct Answer: A, B

Question 8 of 35

Refer to the exhibit.
Exam FCP_GCS_AD-7.6: Question 8 - Image 1

Which two statements about FortiWeb instances deployed in Google Cloud are true?

You can change the operation mode of FortiWeb.

You can deploy FortiWeb using pay-as-you-go or bring-your-own-license.

By default, you can access FortiWeb using HTTPS on port 443.

You can configure the FortiWeb instance with only one network interface.

Correct Answer: A, B

Question 9 of 35

You have been tasked with destroying all resources relating to a recent active-active high-availability (HA) FGSP Terraform deployment in Google Cloud.
What steps do you have to take to ensure a successful deletion? (Choose two.)

Delete all dependencies to resources relating to the Terraform template.

Use the command terraform plan before destroying the Terraform template.

Use the command terraform destroy to delete all resources deployed by the Terraform template.

Delete all resources manually because active-active HA clusters cannot be destroyed using Terraform.

Correct Answer: A, C

Question 10 of 35

Your organization is deciding between deploying FortiGate active-passive high-availability (HA) in Google Cloud using either the software-defined network (SDN) connector or load balancers.
What two reasons should your organization choose the SDN connector over the load balancer deployment? (Choose two.)

Cost is lower.

Failovers are faster because of to API calls.

The SDN connector supports multizone failover.

There isess administrative overhead.

Correct Answer: A, C