Winter Special Sale - Limited Time 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 575363r9

Welcome To DumpsPedia
  1. Home
  2. Fortinet
  3. Public Cloud Security
  4. FCP_WCS_AD-7.4
  5. FCP - AWS Cloud Security 7.4 Administrator Exam Questions and Answers

FCP_WCS_AD-7.4 Sample Questions Answers

Questions 4

Which three statements are correct about VPC flow logs? (Choose three.)

Options:

A.

Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.

B.

Flow logs do not capture DHCP traffic.

C.

Flow logs can capture traffic to the reserved IP address for the default VPC router.

D.

Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

E.

Flow logs can capture real-time log streams for the network interfaces.

Buy Now
Questions 5

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.

Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

Options:

A.

For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.

B.

A-A clusters rely on API calls forsfailovers.

C.

A-A clusters always require a load balancer.

D.

A-A clusters can use a software-defined network (SDN) to perform a failover.

Buy Now
Questions 6

An administrator must deploy a web application firewall (WAF) solution to protect the web applications of their organization.

Why would the administrator choose FortiWeb Cloud over AWS WAF with Fortinet managed rules?

Options:

A.

WAF signatures must be manually updated by FortiGuard.

B.

The solution must meet PCI 6.6 compliance.

C.

SSL inspection is a requirement.

D.

Traffic must be inspected for malware.

Buy Now
Questions 7

An administrator needs to attach an Elastic Network Interface (ENI) to an application instance in a VPC with multiple availability zones. An instance runs in availability zone 1.

Which ENI property must the administrator consider when implementing this requirement?

Options:

A.

An ENI cannot attach to an instance in availability zone 2.

B.

After the ENI detaches from one instance, it can reattach only to the same instance.

C.

You can detach the primary ENI from an AWS instance.

D.

When you move an ENI, network traffic remains directed to the old instance until you terminate that instance.

Buy Now
Questions 8

Refer to the exhibit.

Which two statements are correct about traffic flow in FortiWeb Cloud? (Choose two.)

Options:

A.

The DNS name for the application servers must point to FortiWeb Cloud.

B.

FortiWeb Cloud filters the incoming traffic from users, blocking the OWASP Top 10 attacks, zero-day threats, and other application layer attacks.

C.

FortiWeb Cloud can protect the application servers only if they are all located in the same virtual public cloud (VPC).

D.

Step 2 requires an AWS S3 bucket to be created.

Buy Now
Questions 9

Which three statements correctly describe FortiGate Cloud-Native Firewall (CNF)? (Choose three.)

Options:

A.

It provides carrier-grade protection.

B.

It scales seamlessly.

C.

It uses AWS Elastic Load Balancing (ELB).

D.

It is considered to be a Firewall-as-a-Service (FWaaS).

E.

It can be managed by FortiManager and AWS firewall manager.

Buy Now
Questions 10

Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer (ELB).

Which two statements are correct about the ELB configuration? (Choose two.)

Options:

A.

The load balancer is configured to load balance traffic among multiple availability zones.

B.

The Amazon Resource Name is used to access the load balancer node and targets.

C.

You can use the DNS name to reach the targets behind the ELB.

D.

The load balancer is configured for the internal traffic of the virtual public cloud (VPC).

Buy Now
Exam Code: FCP_WCS_AD-7.4
Exam Name: FCP - AWS Cloud Security 7.4 Administrator Exam
Last Update: Nov 26, 2024
Questions: 35
$66  $164.99
$50  $124.99
$42  $104.99
buy now FCP_WCS_AD-7.4