Free FCSS_CDS_AR-7.6 Exam Dumps

Question 6

You have deployed a FortiGate HA cluster in Azure using a gateway load balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.
What can be the cause of the issue?

A. The FortiNet VMs have IP forwarding disabled, which is required for traffic inspection.
B. The health probes for the gateway load balancer are failing, which causes traffic to bypass the HA cluster.
C. The gateway load balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through.
D. The protected VMs are in a different Azure subscription, which prevents the gateway load balancer from forwarding traffic.

Correct Answer:B

Question 7

Refer to the exhibit.
FCSS_CDS_AR-7.6 dumps exhibit
You deployed a FortiGate HA active-passive cluster in Microsoft Azure.
Which two statements regarding this particular deployment are true? (Choose two.)

A. You can use the vdom-exception command to synchronize the configuration.
B. During a failover, all existing sessions are transferred to the new active FortiGate.
C. The configuration does not synchronize between the primary and secondary devices.
D. There is no SLA for API calls from Microsoft Azure.

Correct Answer:BD

Question 8

You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes. When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and telnet traffic to the subnet.
What can you do to allow SSH traffic?

A. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.
B. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.
C. You must create two new allow SSH rules, each with a number bigger than 5.
D. You must create two new allow SSH rules, each with a number smaller than 5.

Correct Answer:D

Question 9

Refer to the exhibit.
FCSS_CDS_AR-7.6 dumps exhibit
A managed security service provider (MSSP) administration team is trying to deploy a new HA cluster in Azure to filter traffic to and from a client that is also using Azure. However, every deployment attempt fails, and only some of the resources are deployed successfully. While troubleshooting this issue, the team runs the command shown in the exhibit.
What are the implications of the output of the command?

A. The team will not be able to deploy an A-P FortiGate HA cluster with Azure gateway load balancer.
B. The team will not be able to deploy an A-P FortiGate HA cluster with Azure load balancer.
C. The team will not be able to deploy an active-passive (A-P) FortiGate high availability (HA) cluster with SDN connector.
D. The team will not be able to deploy an active-active (A-A) FortiGate HA cluster with Azure load balancer.

Correct Answer:D

Question 10

An administrator is configuring a software-defined network (SDN) connector in FortiWeb to dynamically obtain information about existing objects in an Amazon Elastic Kubernetes Service (EKS) cluster.
Which AWS policy should the administrator attach to a user to achieve this goal?

A. AmazonEKSConnectorServiceRolePolicy
B. AmazonEKSComputePolicy
C. AmazonEKSServicePolicy
D. AmazonEKSClusterPolicy

Correct Answer:D