FCSS_CDS_AR-7.6無料問題集「Fortinet FCSS - Public Cloud Security 7.6 Architect」

質問 1

Refer to the exhibit. You have deployed a Linux EC2 instance in Amazon Web Services (AWS) with the settings shown in the exhibit.
What next step must the administrator take to access this instance from the internet?

（A）Configure the user name and password.

（B）Allocate an Elastic IP address and assign it to the instance.

（C）Create a VIP on FortiGate to allow access.

（D）Enable SSH and allocate it to the device.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Refer to the exhibit. You attempted to access the Linux1 EC2 instance directly from the internet using its public IP address in AWS. However, your connection is not successful.
Given the network topology, what can be the issue?

（A）There is no Internet Gateway attached to the Spoke VPC A.

（B）The Transit Gateway BGP IP address is incorrect.

（C）There is no Elastic IP address attached to FortiGate in the Security VPC.

（D）There is no connection between VPC A and VPC B.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit. A senior administrator in a multinational organization needs to include a comment in the template shown in the exhibit to ensure that administrators from other regions change the Amazon Machine Image (AMI) ID to one that is valid in their location. How can the administrator add the required comment in that section of the file?

（A）The administrator can include the comment with the aws cloudformation update-stack command.

（B）The administrator can add the comment with the # character next to the InstanceTypesection.

（C）The administrator must update the AWSTemplateFormatVersion to the latest version.

（D）The administrator must convert the template file to YAML format to add a comment.

正解：B 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit. A Managed Security Service Provider (MSSP) administration team is trying to deploy a new HA cluster in Azure to filter traffic to and from a client that is also using Azure.
However, every deployment attempt fails, and only some of the resources are deployed successfully. While troubleshooting this issue, the team runs the command shown in the exhibit.
What are the implications of the output of the command?

（A）The team will not be able to deploy an active-passive (A-P) FortiGate high availability (HA) cluster with SDN connector.

（B）The team will not be able to deploy an A-P FortiGate HA cluster with Azure Load Balancer.

（C）The team will not be able to deploy an active-active (A-A) FortiGate HA cluster with Azure Load Balancer.

（D）The team will not be able to deploy an A-P FortiGate HA cluster with Azure Gateway Load Balancer.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

A DevOps team is configuring Terraform to deploy Amazon Web Services (AWS) resources.
They want to use environment variables to authenticate Terraform with AWS, while ensuring that the setup works across multiple developers' machines without exposing credentials in configuration files.
Which two environment variables must the team configure, at a minimum, to allow Terraform to authenticate with AWS? (Choose two.)

（A）AWS_ACCOUNT_ID

（B）AWS_SECRET_ACCESS_KEY

（C）AWS_ROLE_ARN

（D）AWS_ACCESS_KEY_ID

正解：B、D 解答を投票する

質問 6

Refer to the exhibit. You are deploying two FortiGate VMs in HA active-passive mode with load balancers in Microsoft Azure.
Which two statements are true in this load balancing scenario? (Choose two.)

（A）You must add routes to the IP address used by the load balancers to send probes.

（B）A dedicated management interface can be used for load balancing.

（C）The public IP of the active FortiGate is the next-hop for all the incoming traffic.

（D）The internal load balancer is the next-hop for outgoing traffic.

正解：A、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Refer to the exhibit. After the initial Terraform configuration in Microsoft Azure, the terraform plan command is run. Which two statements about running the terraform plan command are true?
(Choose two.)

（A）You must run the terraform init command once, before the terraform plan command.

（B）You cannot run the terraform apply command before the terraform plan command.

（C）The terraform plan command makes Terraform do a dry run.

（D）The terraform plan command will deploy the rest of the resources except the service principal details.

正解：A、C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Refer to the exhibit. A team of AWS administrators is in the process of installing a FortiWeb ingress controller to protect containerized web applications in an Amazon Elastic Kubernetes Service (EKS) cluster. While customizing the manifest file in the image, they realize that they do not know the correct value to enter in the fortiweb-loginfield.
How can they determine he correct value for this field?

（A）They must create a Kubernetes secret with the kubectlcommand.

（B）The correct value is the password of the FortiWeb admin account.

（C）They can find the expected value in the manifest file used to deploy the pods.

（D）They can refer to the output of the EKS cluster deployment.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

FCSS_CDS_AR-7.6 無料問題集「Fortinet FCSS - Public Cloud Security 7.6 Architect」

弊社を連絡する

関連リンク

トップ試験