[2026] Fortinet FCSS - Public Cloud Security 7.6 Architect - FCSS_CDS

문제1

Your administrator instructed you to deploy an Azure vWAN solution to create a connection between the main company site and branch sites to the other company VNETs.
What is the best connection solution available between your company headquarters, branch sites, and the Azure vWAN hub?

A. GRE tunnels

B. ExpressRoute

C. SSL VPN connections

D. An L2TP connection

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제2

A DevOps team is using Terraform to manage their infrastructure across multiple environments.
Currently, the Terraform state file is stored locally on a developer's machine. The team decides to migrate the state file to a remote back-end machine.
Why is storing the Terraform state file in a remote location considered a best practice in this scenario?

A. It eliminates the need to define provider configurations in the state file.

B. It ensures that the state file is encrypted.

C. It prevents the accidental deletion of the state file.

D. It enables collaboration among multiple team members.

정답: D

문제3

Refer to the exhibit. A senior administrator in a multinational organization needs to include a comment in the template shown in the exhibit to ensure that administrators from other regions change the Amazon Machine Image (AMI) ID to one that is valid in their location. How can the administrator add the required comment in that section of the file?

A. The administrator can include the comment with the aws cloudformation update-stack command.

B. The administrator must update the AWSTemplateFormatVersion to the latest version.

C. The administrator must convert the template file to YAML format to add a comment.

D. The administrator can add the comment with the # character next to the InstanceTypesection.

정답: D

설명: (Fast2test 회원만 볼 수 있음)

문제4

Refer to the exhibit. You are deploying two FortiGate VMs in HA active-passive mode with load balancers in Microsoft Azure.
Which two statements are true in this load balancing scenario? (Choose two.)

A. The internal load balancer is the next-hop for outgoing traffic.

B. The public IP of the active FortiGate is the next-hop for all the incoming traffic.

C. You must add routes to the IP address used by the load balancers to send probes.

D. A dedicated management interface can be used for load balancing.

정답: A,C

설명: (Fast2test 회원만 볼 수 있음)

문제5

An administrator is looking for a solution that can provide insight into users and data stored in major SaaS applications in the multicloud environment.
Which product should the administrator deploy to have secure access to SaaS applications?

A. FortiWeb

B. FortiCASB

C. FortiSandbox

D. FortiSIEM

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제6

You must add an Amazon Web Services (AWS) network access list (NACL) rule to allow SSH traffic to a subnet for temporary testing purposes. When you review the current inbound and outbound NACL rules, you notice that the rules with number 5 deny SSH and Telnet traffic to the subnet.
What can you do to allow SSH traffic?

A. You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.

B. You must create two new allow SSH rules, each with a number bigger than 5.

C. You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.

D. You must create two new allow SSH rules, each with a number smaller than 5.

정답: D

문제7

Which statement about immutable infrastructure in automation is true?

A. It is the practice of modifying the existing server configuration after it is deployed.

B. It is the practice of applying hotfixes and OS patches after deployment.

C. It is the practice of deploying a new server for every configuration change.

D. It is the practice of deploying two parallel servers for high availability.

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제8

You are automating configuration changes on one of the FortiGate VMs using Linux Red Hat Ansible.
How does Linux Red Hat Ansible connect to FortiGate to make the configuration change?

A. It uses SSH.

B. It uses an API.

C. It uses a FortiGate VIP.

D. It uses a YAML file.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

Fortinet FCSS - Public Cloud Security 7.6 Architect - FCSS_CDS_AR-7.6무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트