FCSS_CDS_AR-7.6 FCSS - Public Cloud Security 7.6 Architect Questions and Answers

Add a route with your local internet public IP address as the destination and the internet gateway as the target.

Add a route with your local internet public IP address as the destination and the transit gateway as the target.

Add a route to the destination 0.0.0.0/0 with the transit gateway as the target.

Deploy an internet gateway, associate an EIP with the Customer VPC private subnet, and then add a new route with destination 0.0.0.0/0 with the internet gateway as the target.

Deploy an internet gateway, attach it to the Customer VPC, and then associate an EIP with the port1 of the FortiGate in the Customer VPC.

You can use the vdom-exception command to synchronize the configuration.

During a failover, all existing sessions are transferred to the new active FortiGate.

The configuration does not synchronize between the primary and secondary devices.

There is no SLA for API calls from Microsoft Azure.

To restrict which FortiOS versions are accepted for deployment

To indicate the correct FortiOS upgrade path after deployment

To add a comment with the permitted FortiOS versions that can be deployed

To document the FortiOS versions in the resulting topology

You can use BGP over IPsec for maximum throughput.

You can combine it with IPsec to achieve higher bandwidth.

It eliminates the use of ECMP.

You can use GRE-based tunnel attachments.

Make sure to add the Client secret on FortiGate side of the configuration.

Make sure to add the Tenant ID on FortiGate side of the configuration.

Make sure to enable the system assigned managed identity on Azure.

Make sure to set the type to system managed identity on FortiGate SDN connector settings.

Allocate an Elastic IP address and assign it to the instance.

Create a VIP on FortiGate to allow access.

Enable SSH and allocate it to the device.

Configure the user name and password.

The organization is using a free Azure AD license.

The Azure account doesn't have the global administrator role.

The administrator enabled the wrong defender plan for servers.

The FortiCNP account in Azure has the Storage Blob Data Reader role.

Azure Bicep generates deployment logs that are optimized to improve error handling.

Azure Bicep provides immediate support for all Azure services, including those in preview.

Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates.

Azure Bicep can reduce deployment costs by limiting resource utilization during testing.