FCP - AWS Cloud Security 7.4 Administrator (FCP_WCS_AD-7.4) Free Practice Test

Question 1

A global organization with cloud networks deployed in several AWS regions wants to set up next-generation firewall (NGFW) protection using FortiGate Cloud-Native Firewall (CNF).
What are two deployment considerations for the organization? (Choose two.)

A. Only one CNF instance is required to protect all AWS regions.

B. More than one AWS account can be associated with a CNF instance.

C. A CNF instance is required for each AWS region that must be protected.

D. They must choose AWS Firewall Manager to provision a CNF instance.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which three statements correctly describe FortiGate Cloud-Native Firewall (CNF)? (Choose three.)

A. It uses AWS Elastic Load Balancing (ELB).

B. It scales seamlessly.

C. It provides carrier-grade protection.

D. It is considered to be a Firewall-as-a-Service (FWaaS).

E. It can be managed by FortiManager and AWS firewall manager.

Correct Answer: B,D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

A. A-A clusters always require a load balancer.

B. A-A clusters can use a software-defined network (SDN) to perform a failover.

C. For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.

D. A-A clusters rely on API calls for sfailovers.

Correct Answer: A,C

Question 4

A customer is attempting to deploy an active-passive high availability (HA) cluster using the software-defined network (SDN) connector in the AWS cloud.
What is an important consideration to ensure a successful formation of HA, failover, and traffic flow?

A. Both cluster members must be in the same availability zone.

B. VDOM exceptions must be configured.

C. Both cluster members must show as healthy in the elastic load balancer (ELB) configuration.

D. Unicast FortiGate Clustering Protocol (FGCP) must be used.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet FCP - AWS Cloud Security 7.4 Administrator (FCP_WCS_AD-7.4) Free Practice Test