Fortinet FCP_WCS_AD-7.4 Exam Questions

Question 6 of 35

Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer (ELB).

Which two statements are correct about the ELB configuration? (Choose two.)

The load balancer is configured to load balance traffic among multiple availability zones.

The Amazon Resource Name is used to access the load balancer node and targets.

You can use the DNS name to reach the targets behind the ELB.

The load balancer is configured for the internal traffic of the virtual public cloud (VPC).

Correct Answer: A, C

Question 7 of 35

Which two statements about the FortiCloud portal are true? (Choose two.)

You can gain remote access to your FortiGate VM directly from the portal.

To assign permissions in the identity and access management (IAM) portal, you must write a JSON script.

You can access the FortiFlex portal only after you purchase a FortiFlex license and register it on FortiCare.

You can access only cloud services that you have subscribed to on AWS marketplace.

Correct Answer: A, C

You can gain remote access to your FortiGate VM directly from the FortiCloud portal, which allows for efficient management and troubleshooting. Additionally, you can access the FortiFlex portal only after you purchase a FortiFlex license and register it on FortiCare, ensuring that only authorized users with registered licenses can utilize the FortiFlex services.

Question 8 of 35

Which three statements correctly describe FortiGate Cloud-Native Firewall (CNF)? (Choose three.)

It provides carrier-grade protection.

It scales seamlessly.

It uses AWS Elastic Load Balancing (ELB).

It is considered to be a Firewall-as-a-Service (FWaaS).

It can be managed by FortiManager and AWS firewall manager.

Correct Answer: B, D, E

FortiGate Cloud-Native Firewall (CNF) is considered to be a Firewall-as-a-Service (FWaaS), which provides scalable network security solutions. It scales seamlessly due to its cloud-native architecture, allowing for flexible resource allocation according to demand. Additionally, it can be managed both by FortiManager and AWS firewall manager, ensuring comprehensive management capabilities across different platforms. While it provides robust security features, stating it provides carrier-grade protection is more of a general claim rather than a specific technological characteristic. The integration with AWS services further aligns with its cloud-native nature.

Question 9 of 35

AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.

Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)

Higher VPN throughput

Web filtering

OSPF over IPSec

Advanced dynamic routing

Secure SD-WAN with application visibility

Correct Answer: B, C, E

Question 10 of 35

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.

Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.

A-A clusters rely on API calls for failovers.

A-A clusters always require a load balancer.

A-A clusters can use a software-defined network (SDN) to perform a failover.

Correct Answer: A, C