Online Access Free FCSS_CDS_AR-7.6 Exam Questions

Which two statements about the Amazon Web Services (AWS) security groups are true?
(Choose two.)

• A.Security groups are applicable at the instance level.
• B.EC2 instances, elastic network interfaces (ENIs), and subnets may have security groups configured on them.
• C.Configured traffic rules may have an action of allow or deny.
• D.A security group is a stateful list of ingress and egress traffic rules.

An administrator decides to use the Use managed identity option on the FortiGate SDN connector with Microsoft Azure. However, the SDN connector is failing on the connection. What must the administrator do to correct this issue?

• A.Make sure to set the type to system managed identity on FortiGate SDN connector settings.
• B.Make sure to add the Client Secret on the FortiGate side of the configuration.
• C.Make sure to add the Tenant ID on the FortiGate side of the configuration.
• D.Make sure to enable the system-assigned managed identity on Azure.

An administrator is relying on an Azure Bicep linter to find possible issues in Bicep files.
Which problem can the administrator expect to find?

• A.One or more modules are not using runtime values as parameters.
• B.There are output statements that contain passwords.
• C.Some resources are missing dependsOn statements.
• D.The resources to be deployed exceed the quota for a region.

As part of your organization's monitoring plan, you have been tasked with obtaining and analyzing detailed information about the traffic sourced at one of your FortiGate EC2 instances.
What can you do to achieve this goal?

• A.Add the EC2 instance as a target in CloudWatch to collect its traffic logs.
• B.Configure a network access analyzer scope with the EC2 instance as a match finding.
• C.Use AWS CloudTrail to capture and then examine traffic from the EC2 instance.
• D.Create a virtual public cloud (VPC) flow log at the network interface level for the EC2 instance.

You need a solution to safeguard public cloud-hosted web applications from the OWASP Top 10 vulnerabilities. The solution must support the same region in which your applications reside, with minimum traffic cost.
Which solution meets the requirements?

• A.Use FortiWeb
• B.Use FortiCNP
• C.Use FortiADC
• D.Use FortiGate