Free FCSS_CDS_AR-7.6 Exam Dumps

No Installation Required, Instantly Prepare for the FCSS_CDS_AR-7.6 exam and please click the below link to start the FCSS_CDS_AR-7.6 Exam Simulator with a real FCSS_CDS_AR-7.6 practice exam questions.
Use directly our on-line FCSS_CDS_AR-7.6 exam dumps materials and try our Testing Engine to pass the FCSS_CDS_AR-7.6 which is always updated.

Exam Code: FCSS_CDS_AR-7.6
Exam Title: FCSS - Public Cloud Security 7.6 Architect
Vendor: Fortinet
Exam Questions: 38
Last Updated: March 9th,2026

Question 1

Refer to the exhibit.
FCSS_CDS_AR-7.6 dumps exhibit
Refer to the exhibit.
You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure.
After the deployment, you prefer to use FGSP to synchronize sessions and allow asymmetric return
traffic. In the environment, FortiGate port 1 and port 2 are facing external and internal load balancers
respectively.
What IP address must you use in the peering configuration?

A. The opposite FortiGate port 2 IP address.
B. The public load balancer port 2 IP address.
C. The internal load balancer port 1 IP address.
D. The opposite FortiGate port 1 IP address.

Correct Answer:D

Question 2

An administrator decides to use the Use managed identity option on the FortiGate SDN connector with Microsoft Azure. However, the SDN connector is failing on the connection. What must the administrator do to correct this issue?

A. Make sure to add the Client Secret on the FortiGate side of the configuration.
B. Make sure to add the Tenant ID on the FortiGate side of the configuration.
C. Make sure to enable the system-assigned managed identity on Azure.Make sure to set the type to system managed identity on FortiGate SDN connector settings.

Correct Answer:C

Question 3

Refer to the exhibit.
FCSS_CDS_AR-7.6 dumps exhibit
An administrator implements FortiWeb ingress controller to protect containerized web applications in an AWS Elastic Kubernetes Service (EKS) cluster.
What can you conclude about the topology shown in FortiView?
A. The FortiWeb VM gets the latest cluster information through an SDN connector.
FCSS_CDS_AR-7.6 dumps exhibit B. This topology has two services and two ingress controllers deployed.
C. Both services will be load balanced among the two nodes and the four pods.
D. Adding a new service will update the FortiWeb configuration automatically.

Correct Answer:A

Question 4

In an SD-WAN TGW Connect topology, which three initial steps are mandatory when routing traffic from a spoke VPC to a security VPC through a Transit Gateway? (Choose three.)

A. From the security VPC TGW subnet routing table, point 0.0.0.0/0 traffic to the FortiGate internal port.
B. From the security VPC TGW subnet routing table, point 0.0.0.0/0 traffic to the TGW.
C. From both spoke VPCs, and the security VPC, point 0.0.0.0/0 traffic to the Internet Gateway.
D. From the security VPC FortiGate internal subnet routing table, point 0.0.0.0/0 traffic to the TGW.
E. From the spoke VPC internal routing table, point 0.0.0.0/0 traffic to the TGW.

Correct Answer:ADE

Question 5

Refer to the exhibit.
FCSS_CDS_AR-7.6 dumps exhibit
After the initial Terraform configuration in Microsoft Azure, the terraform plan command is run. Which two statements about running the terraform plan command are true? (Choose two.)

A. The terraform plan command will deploy the rest of the resources except the service principle details.
B. You cannot run the terraform apply command before the terraform plan command.
C. The terraform plan command makes terraform do a dry run.
D. You must run the terraform init command once, before the terraform plan command.

Correct Answer:CD