Free Fortinet NSE7_CDS_AR-7.6 Exam Dumps Questions & Answers

An administrator is configuring a software-defined network (SDN) connector in FortiWeb to dynamically obtain information about existing objects in an Amazon Elastic Kubernetes Service (EKS) cluster.
Which AWS policy should the administrator attach to a user to achieve this goal?

• A.  AmazonEKSComputePolicy
• B.  AmazonEKSConnectorServiceRolePolicy
• C.  AmazonEKSServicePolicy
• D.  AmazonEKSClusterPolicy

You have deployed a FortiGate HA cluster in Azure using a Gateway Load Balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.
What can be the cause of the issue?

• A.  The health probes for the Gateway Load Balancer are failing, which causes traffic to bypass the HA cluster.
• B.  The protected VMs are in a different Azure subscription, which prevents the Gateway Load Balancer from forwarding traffic.
• C.  The Gateway Load Balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through.
• D.  The Fortinet VMs have IP forwarding disabled, which is required for traffic inspection.

You are experiencing intermittent connectivity issues in a FortiGate HA cluster deployed with Azure gateway load balancer. Traffic is being dropped when it passes through the cluster.
What is the cause of the issue?

• A.  The protected VMs are running an application that fragments packets.
• B.  The Azure gateway load balancer is configured with an incorrect health probe port.
• C.  The Azure gateway load balancer is blocking large packets, causing traffic failures.
• D.  The FortiGate firewalls are using the default maximum transmission unit (MTU) size supported by Azure.

An administrator is trying to implement FortiCNP with Microsoft Azure Security integration.
However, FortiCNP is not able to extract any cloud integration data from Azure; therefore, real- time cloud security monitoring is not possible.
What is causing this issue?

• A.  The FortiCNP account in Azure has the Storage Blob Data Reader role.
• B.  The Azure account doesn't have the Global Administrator role.
• C.  The administrator enabled the wrong Defender plan for servers.
• D.  The organization is using a free Azure AD license.

Refer to the exhibit. An administrator has deployed a FortiGate VM in Amazon Web Services (AWS) and is trying to access it using its public IP address from their local computer. However, the connection is not successful, and at the same time FortiGate is not receiving any HTTPS or SSH traffic to its external interface.
What should the administrator check for possible issue?

• A.  Check the FortiGate firewall policies.
• B.  Check the inbound rules of the security groups.
• C.  Check the debug flow for any network ACLs.
• D.  Check the FortiGate instance ID.