Free Fortinet FCP_WCS_AD-7.4 Exam Dumps Questions & Answers

An administrator has been asked to deploy an active-passive (A-P) FortiGate cluster in the AWS cloud across two availability zones.
In addition to enhanced redundancy, which other major difference is there compared to deploying A-P high availability in the same availability zone?

• A.  Secondary IP address configuration is used.
• B.  The FortiGate devices act as a single, logical instance.
• C.  The number of subnets required is less.
• D.  IP addressing and subnetting are not shared.

Refer to the exhibit.

An administrator configured a FortiGate device to connect to the AWS API to retrieve resource values from the AWS console to create dynamic objects for the FortiGate policies. The administrator is unable to retrieve AWS dynamic objects on FortiGate.
Which two reasons can explain why? (Choose two.)

• A.  AWS was not able to validate credentials provided by the AWS Lab SDN connector because of a clock skew between FortiGate and AWS.
• B.  The AWS Lab SDN connector failed to connect on port 401.
• C.  The AWS Lab SDN did not find any instances in the configured VPC.
• D.  The AWS Lab SDN connector is configured with an invalid AWS access or secret key.
• E.  The AWS API call is not supported on XML version 1.0.

Refer to the exhibit.

Traffic is initiated from the EC2 instance and is destined for the internet.
Which traffic flow is correct?

• A.  There is no route to the internet in the Private Route Table. The traffic does not reach the internet.
• B.  EC2 instance > GWLBe > internet
• C.  EC2 instance > NAT GW > IGW > internet
• D.  EC2 instance > GWLBe > NAT GW > IGW > internet

An administrator needs to attach an Elastic Network Interface (ENI) to an application instance in a VPC with multiple availability zones. An instance runs in availability zone 1.
Which ENI property must the administrator consider when implementing this requirement?

• A.  An ENI cannot attach to an instance in availability zone 2.
• B.  When you move an ENI, network traffic remains directed to the old instance until you terminate that instance.
• C.  After the ENI detaches from one instance, it can reattach only to the same instance.
• D.  You can detach the primary ENI from an AWS instance.

Which three statements are correct about VPC flow logs? (Choose three.)

• A.  Flow logs do not capture DHCP traffic.
• B.  Flow logs can capture real-time log streams for the network interfaces.
• C.  Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.
• D.  Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.
• E.  Flow logs can capture traffic to the reserved IP address for the default VPC router.