FCSS_CDS_AR-7.6 FCSS - Public Cloud Security 7.6 Architect Questions and Answers

You do not have to create any NACL rules because the default security group rule automatically allows SSH traffic to the subnet.

You must create a new allow SSH rule anywhere in the network ACL rule base to allow SSH traffic.

You must create two new allow SSH rules, each with a number bigger than 5.

You must create two new allow SSH rules, each with a number smaller than 5.

To restrict which FortiOS versions are accepted for deployment

To indicate the correct FortiOS upgrade path after deployment

To add a comment with the permitted FortiOS versions that can be deployed

To document the FortiOS versions in the resulting topology

You can use BGP over IPsec for maximum throughput.

You can combine it with IPsec to achieve higher bandwidth.

It eliminates the use of ECMP.

You can use GRE-based tunnel attachments.

Azure Bicep generates deployment logs that are optimized to improve error handling.

Azure Bicep provides immediate support for all Azure services, including those in preview.

Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates.

Azure Bicep can reduce deployment costs by limiting resource utilization during testing.

The opposite FortiGate port 2 IP address.

The public load balancer port 2 IP address.

The internal load balancer port 1 IP address.

The opposite FortiGate port 1 IP address.

To maximize the number of logs saved

To monitor logs in real time

To retain logs for a long term

To troubleshoot a log flow issue

The FortiWeb VM gets the latest cluster information through an SDN connector.

This topology has two services and two ingress controllers deployed.

Both services will be load balanced among the two nodes and the four pods.

Adding a new service will update the FortiWeb configuration automatically.

Both the TGW attachment and propagation must be in the same TGW route table.

TGW can have multiple TGW route tables.

A TGW attachment can be associated with multiple TGW route tables.

The TGW default route table cannot be disabled.