Online Access Free FCP_WCS_AD-7.4 Exam Questions

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.
The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.
Which action would allow the EIP assignment to be successful?

• A.Create and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.
• B.Create and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• C.Create and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• D.Shut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.

Refer to the exhibit.

Which statement is correct about the VPC peering connections shown in the exhibit?

• A.You can associate VPC ID pcx-23232323 with VPC B to form a VPC peering connection between VPC B and VPC C.
• B.You cannot create a separate VPC peering connection between VPC B and VPC C to route packets directly.
• C.You cannot route packets directly from VPC B to VPC C through VPC A.
• D.To route packets directly from VPC B to VPC C through VPC A, you must add a route for network 192.168.0.0/16 in the VPC A routing table.

Refer to the exhibit.

Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)

• A.GWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.
• B.GWLB forwards traffic to FortiGate without encapsulation in its dedicated subnet.
• C.Inbound traffic is directed to the GWLB through a GWLB endpoint.
• D.Inbound traffic is directed to the application subnet through a GWLB endpoint.

An AWS administrator is designing internet connectivity for an organization's virtual public cloud (VPC). The organization has web servers with private addresses that must be reachable from the internet. The web servers must be highly available.
Which two configurations can you use to ensure the web servers are highly available and reachable from the internet? (Choose two.)

• A.Deploy a network load balancer.
• B.Deploy web servers in multiple availability zones.
• C.Configure a network address translation (NAT) Gateway in your VPC. Place web servers behind the NAT Gateway.
• D.Add a route to the default virtual public cloud (VPC) route table forwarding all traffic to the internet gateway.

An administrator needs to attach an Elastic Network Interface (ENI) to an application instance in a VPC with multiple availability zones. An instance runs in availability zone 1.
Which ENI property must the administrator consider when implementing this requirement?

• A.You can detach the primary ENI from an AWS instance.
• B.After the ENI detaches from one instance, it can reattach only to the same instance.
• C.An ENI cannot attach to an instance in availability zone 2.
• D.When you move an ENI, network traffic remains directed to the old instance until you terminate that instance.