FCSS - Public Cloud Security 7.6 Architect

Here you have the best Fortinet FCSS_CDS_AR-7.6 practice exam questions

You have 54 total questions to study from
Each page has 5 questions, making a total of 11 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on December 14, 2025
This site is not affiliated with or endorsed by Fortinet.

Question 1 of 54

You have deployed a FortiGate HA cluster in Azure using a gateway load balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.
What can be the cause of the issue?

The health probes for the gateway load balancer are failing, which causes traffic to bypass the HA cluster.

The protected VMs are in a different Azure subscription, which prevents the gateway load balancer from forwarding traffic.

The Fortinet VMs have IP forwarding disabled, which is required for traffic inspection.

The gateway load balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through.

Correct Answer: C

Question 2 of 54

Your organization has several FortiGate VMs deployed in Azure. You need to implement a solution with Azure native tools that allows you to determine whether packets are being permitted or blocked by the FortiGate VMs.
Which solution can you use to meet these requirements?

Insert the VM traffic logs in Azure Sentinel.

Install the Azure Monitor agent in all VMs.

Use IP flow verify for each of the VMs.

Configure Azure Advisor to analyze the network traffic.

Correct Answer: C

Question 3 of 54

An AWS administrator must ensure that each member of the cloud deployment team has the correct permissions to deploy and manage resources using CloudFormation. The administrator is researching which tasks must be executed with CloudFormation and therefore require CloudFormation permissions.
Which task is run using CloudFormation?

Installing a Helm chart to deploy a FortiWeb ingress controller in an EKS cluster

Creating an EKS cluster with the eksctl create cluster command

Changing the number of nodes in a EKS cluster from AWS CloudShell

Deploying a new pod with a service in an Elastic Kubernetes Service (EKS) cluster using the kubectl command

Correct Answer: A

Question 4 of 54

Refer to the exhibit.
Exam FCSS_CDS_AR-7.6: Question 4 - Image 1

An administrator deployed an HA active-active load balance sandwich in Microsoft Azure. The setup requires configuration synchronization between devices.
What can you conclude from the configured settings shown in the exhibit? (Choose two.)

FortiGate A and FortiGate B are two independent devices.

By default, FortiGate uses FGCP.

It does not synchronize the FortiGate hostname.

FortiGate-VM instances are scaled out automatically according to predefined workload levels.

Correct Answer: B, C

Question 5 of 54

A VM in Azure is failing to communicate with other VMs in the same subnet.
What is the most likely cause?

Some of the VMs are beyond your allowed quota for the Azure region.

There is at least one user-defined route blocking traffic within the subnet.

The VMs do not have a public IP address configured.

A network security group (NSG) has overridden the default intrasubnet communication rule.

Correct Answer: D