Fortinet FCP_WCS_AD-7.4 Quiz 1 Topic 5 Questions 1-5

Question: 1

A customer has deployed FortiGate Cloud-Native Firewall (CNF).

Which two statements are correct about policy sets? (Choose two.)

AThere is an implicit deny rule at the bottom of the policy set.

BThe policy set must be manually synchronized to the CNF instance each time it is modified.

CA new policy set is created with each deployed CNF instance.

DMultiple policy sets can be applied to a single CNF instance.

Show Answer

Question: 2

An administrator wants to deploy a solution to automatically create firewall rules on FortiGate to accelerate time-to-protection for threats.

Which AWS service can be integrated with FortiGate to accomplish this?

AAWS Firewall Manager

BAWS network access control list

CSDN Connector for AWS

DAWS GuardDuty

Show Answer

Question: 3

An administrator must deploy a web application firewall (WAF) solution to protect the web applications of their organization.

Why would the administrator choose FortiWeb Cloud over AWS WAF with Fortinet managed rules?

AWAF signatures must be manually updated by FortiGuard.

BThe solution must meet PCI 6.6 compliance.

CSSL inspection is a requirement.

DTraffic must be inspected for malware.

Show Answer

Question: 4

Refer to the exhibit.

q4_FCP_WCS_AD-7.4

Traffic is initiated from the EC2 instance and is destined for the internet.

Which traffic flow is correct?

AEC2 instance > NAT GW > IGW > internet

BThere is no route to the internet in the Private Route Table. The traffic does not reach the internet.

CEC2 instance > GWLBe > NAT GW > IGW > internet

DEC2 instance > GWLBe > internet

Show Answer

Question: 5

Refer to the exhibit.

q5_FCP_WCS_AD-7.4

What occurs during a failover for an active-passive (A-P) cluster that is deployed in two different availability zones? (Choose two.)

AThe cluster elastic IP address (EIP) is moved from Port1 of FGT-1 to Port1 of FGT-2.

BThe secondary IP address of Port2 of FGT-1 is moved to Port2 of FGT-2.

CThe default static route in the Private-AZ1 subnet route table is modified to forward all traffic to Port2 of FGT2.

DAn additional route is added to the route table of the HA Sync AZ2 subnet to forward all traffic to the Internet GW.

Show Answer

Fortinet FCP_WCS_AD-7.4 Quiz:1 Topic:5 Questions:1-5