Free Fortinet FCSS_CDS_AR-7.6 Exam Dumps Questions & Answers

Your organization has several FortiGate VMs deployed in Azure. You need to implement a solution with Azure native tools that allows you to determine whether packets are being permitted or blocked by the FortiGate VMs.
Which solution can you use to meet these requirements?

• A.  Use IP flow verify for each of the VMs.
• B.  Configure Azure Advisor to analyze the network traffic.
• C.  Insert the VM traffic logs in Azure Sentinel.
• D.  Install the Azure Monitor agent in all VMs.

The DevOps team is troubleshooting a FortiGate software-defined network(SDN) connector that is failing to integrate with a Kubernetes cluster. While using several debug commands, they find that the connector connection generates an error code 401.
What is the cause of this error?

• A.  The service principal being used has the correct role assigned.
• B.  The configured client secret credentials are incorrect.
• C.  The FortiGate firewall is using HTTP to send API calls instead of HTTPS.
• D.  The Kubernetes cluster is using an unsupported API version.

Refer to the exhibit. You are troubleshooting a FortiGate HA floating IP issue with Microsoft Azure. After the failover, the new primary device does not have the previous primary device floating IP address.
What could be the possible issue with this scenario?

• A.  A wrong client secret credential is used.
• B.  FortiGate port4 does not have internet access.
• C.  The error is caused by credential time expiration.
• D.  The Azure service principal account must have a contributor role.

Refer to the exhibit. You have deployed a Linux EC2 instance in Amazon Web Services (AWS) with the settings shown in the exhibit.
What next step must the administrator take to access this instance from the internet?

• A.  Allocate an Elastic IP address and assign it to the instance.
• B.  Enable SSH and allocate it to the device.
• C.  Create a VIP on FortiGate to allow access.
• D.  Configure the user name and password.

Refer to the exhibit. The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers.
There is no SDN connector used in this solution.
Which configuration must the administrator implement on each FortiGate?

• A.  Two static routes to Azure probe IP address.
• B.  One static route to Azure Lambda IP address.
• C.  Single BGP route to Azure probe IP address.
• D.  Two BGP routes to Azure probe IP address.