Online Access Free FCP_WCS_AD-7.4 Exam Questions

Refer to the exhibit.

You deployed an active-passive FortiGate HA cluster using a CloudFormation template on an existing VPC. Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the Elastic and secondary IP addresses.
Which statement is correct about the output of the debug?

• A.The routing table for Fgt2 updated successfully, and port2 will provide internet access to Fgt2.
• B.The Elastic IP is associated with port2 of Fgt2, and the secondary IP address for port1 and port2 was updated successfully.
• C.IP address 10.0.0.13 is now associated with eni-0b61d8afc0aefb8a2.
• D.The Elastic IP is associated with port1 of Fgt2.

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

• A.A-A clusters can use a software-defined network (SDN) to perform a failover.
• B.A-A clusters rely on API calls for sfailovers.
• C.For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
• D.A-A clusters always require a load balancer.

Refer to the exhibit.

Which statement is correct about the VPC peering connections shown in the exhibit?

• A.You can associate VPC ID pcx-23232323 with VPC B to form a VPC peering connection between VPC B and VPC C.
• B.You cannot route packets directly from VPC B to VPC C through VPC A.
• C.You cannot create a separate VPC peering connection between VPC B and VPC C to route packets directly.
• D.To route packets directly from VPC B to VPC C through VPC A, you must add a route for network 192.168.0.0/16 in the VPC A routing table.

A customer has implemented GWLB between the partner and application VPCs. FortiGate appliances are deployed in the partner VPC with multiple AZs to inspect traffic transparently.
Which two things will happen to application traffic based on the GWLB deployment? (Choose two.)

• A.The original traffic exchanged between the GWLB and FortiGate will be hashed for data integrity.
• B.The content of the original traffic exchanged between the GWLB and FortiGate will be preserved.
• C.Inbound and outbound traffic will go to multiple devices, which will perform load balancing.
• D.Inbound and outbound traffic will go to the same device, which will perform stateful processing.

AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.
Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)

• A.Secure SD-WAN with application visibility
• B.OSPF over IPSec
• C.Higher VPN throughput
• D.Web filtering
• E.Advanced dynamic routing