Free Fortinet FCSS_CDS_AR-7.6 Exam Questions

Question 1

Refer to the exhibit.In your Amazon Web Services (AWS), you must allow inbound HTTPS access to the Customer VPC FortiGate VM from the internet. However, your HTTPS connection to the FortiGate VM in the Customer VPC is not successful. Also, you must ensure that the Customer VPC FortiGate VM sends all the outbound internet traffic through the Security VPC. How do you correct this issue with minimal configuration changes? (Choose three.)

A : Add a route with your local internet public IP address as the destination and the internet gateway as the target.

B : Add a route with your local internet public IP address as the destination and the transit gateway as the target.

C : Add a route to the destination 0.0.0.0/0 with the transit gateway as the target.

D : Deploy an internet gateway, associate an EIP with the Customer VPC private subnet, and then add a new route with destination 0.0.0.0/0 with the internet gateway as the target.

E : Deploy an internet gateway, attach it to the Customer VPC, and then associate an EIP with port1 of the FortiGate in the Customer VPC.

Answer: B,C,E

Question 2

An organization is deploying FortiDevSec to enhance security for containerized applications, and they need to ensure containers are monitored for suspicious behavior at runtime. Which FortiDevSec feature is best for detecting runtime threats?

A : FortiDevSec Software Composition Analysis (SCA)

B : FortiDevSec Static Application Security Testing (SAST)

C : FortiDevSec Dynamic Application Security Testing (DAST)

D : FortiDevSec Container Scanner

Answer: D

Question 3

An organization is deploying FortiDevSec to enhance security for containerized applications, and they need to ensure containers are monitored for suspicious behavior at runtime. Which FortiDevSec feature is best for detecting runtime threats?

A : FortiDevSec Software Composition Analysis (SCA)

B : FortiDevSec Static Application Security Testing (SAST)

C : FortiDevSec Dynamic Application Security Testing (DAST)

D : FortiDevSec Container Scanner

Answer: D

Question 4

Your DevOps team is evaluating different Infrastructure as Code (IaC) solutions for deploying complex Azure environments. What is an advantage of choosing Azure Bicep over other IaC tools available?

A : Azure Bicep generates deployment logs that are optimized to improve error handling.

B : Azure Bicep provides immediate support for all Azure services, including those in preview.

C : Azure Bicep requires less frequent schema updates than Azure Resource Manager (ARM) templates.

D : Azure Bicep can reduce deployment costs by limiting resource utilization during testing.

Answer: B

Question 5