Weekend Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

A global organization with cloud networks deployed in several AWS regions wants to set up next-generation firewall (NGFW) protection using FortiGate Cloud-Native Firewall (CNF).

What are two deployment considerations for the organization? (Choose two.)

Options:

They must choose AWS Firewall Manager to provision a CNF instance.

A CNF instance is required for each AWS region that must be protected.

More than one AWS account can be associated with a CNF instance.

Only one CNF instance is required to protect all AWS regions.

Buy Now

Question 2

Refer to the exhibit.

You deployed an active-passive FortiGate HA cluster using a CloudFormation template on an existing VPC. Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the Elastic and secondary IP addresses.

Which statement is correct about the output of the debug?

Options:

The routing table for Fgt2 updated successfully, and port2 will provide internet access to Fgt2.

The Elastic IP is associated with port1 of Fgt2.

IP address 10.0.0.13 is now associated with eni-0b61d8afc0aefb8a2.

The Elastic IP is associated with port2 of Fgt2, and the secondary IP address for port1 and port2 was updated successfully.

Question 3

You are troubleshooting network connectivity issues between two VMs deployed in AWS.

One VM is a FortiGate located on subnet "LAN" that is part of the VPC "Encryption". The other VM is a Windows server located on the subnet "servers" which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate.

What are two reasons for this? (Choose two.)

Options:

The firewall in the Windows VM is blocking the traffic.

The default AWS Network Access Control List (NACL) does not allow this traffic.

By default, AWS does not allow ICMP traffic between subnets.

Add an inbound allow ICMP rule in the security group attached to the windows server.

Get Free FCP_WCS_AD-7.4 Questions and Answers

Weekend Sale 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: save70

FCP_WCS_AD-7.4 Exam Dumps : FCP - AWS Cloud Security 7.4 Administrator Exam

Fortinet Related Exams

Verified By IT Certified Experts

CertsTopics.com Certified Safe Files

Up-To-Date Exam Study Material

99.5% High Success Pass Rate

100% Accurate Answers

Instant Downloads

Exam Questions And Answers PDF

Try Demo Before You Buy

FCP - AWS Cloud Security 7.4 Administrator Exam Questions and Answers

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

Options:

Answer:

Explanation:

CompTIA

Fortinet

Microsoft

Salesforce