Free FCP – AWS Cloud Security 7.4 Administrator Exam FCP_WCS_AD-7.4 Exam Practice Test

Your customers have been reporting slow response times when accessing your web application.What are two possible ways to increase response times from web servers protected by FortiWeb Cloud? (Choose two.)Your customers have been reporting slow response times when accessing your web application. What are two possible ways to increase response times from web servers protected by FortiWeb Cloud? (Choose two.)

• Deploy FortiWeb Cloud in the same region where your web application is being hosted.
• Enable a content delivery network
• Modify DNS entries to directly point to your web server.
• Disable WAF functionality.

What is a drawback of deploying a FortiWeb VM inside a virtual public cloud (VPC) compared to FortiWeb Cloud?

• It is unable to support web applications from OWASP Top 10 threats.
• It does not support zero-day protection.
• It is slower than FortiWeb Cloud to apply advanced WAF protection.
• Only applications going through the VPC are protected.

Your company deployed a FortiSandbox for AWS.Which statement is correct about FortiSandbox for AWS?

• FortiSandbox for AWS comes as a hybrid solution. The FortiSandbox manager is installed on- premises and analyzes the results of the sandboxing process received from AWS EC2 instances.
• The FortiSandbox manager is installed on the AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.
• FortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.
• FortiSandbox deploys new EC2 instances with the custom Windows and Linux VMs, then it sends malware, runs it, and captures the results for analysis.

An administrator must deploy a web application firewall (WAF) solution to protect the web applications of their organization.Why would the administrator choose FortiWeb Cloud over AWS WAF with Fortinet managed rules?

• WAF signatures must be manually updated by FortiGuard.
• The solution must meet PCI 6.6 compliance.
• SSL inspection is a requirement.
• Traffic must be inspected for malware.

An administrator needs to attach an Elastic Network Interface (ENI) to an application instance in a VPC with multiple availability zones. An instance runs in availability zone 1.Which ENI property must the administrator consider when implementing this requirement?

• An ENI cannot attach to an instance in availability zone 2.
• After the ENI detaches from one instance, it can reattach only to the same instance.
• You can detach the primary ENI from an AWS instance.
• When you move an ENI, network traffic remains directed to the old instance until you terminate that instance.

You need to deploy a new Windows server in AWS to offload web traffic from an existing web server in a different availability zone.According to the AWS shared responsibility model, what three actions must you take to secure the new EC2 instance? (Choose three.)

• Update software on the instance.
• Change the existing elastic load balancer (ELB) to a gateway load balancer
• Configure security groups.
• Manage the operating system on the instance.
• Move all web servers into the same availability zone.

An administrator wants to deploy a solution to automatically create firewall rules on FortiGate to accelerate time-to-protection for threats.Which AWS service can be integrated with FortiGate to accomplish this?

• AWS Firewall Manager
• AWS network access control list
• SDN Connector for AWS
• AWS GuardDuty

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.Which action would allow the EIP assignment to be successful?

• Create and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• Shut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.
• Create and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.
• Create and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.

An AWS administrator is designing internet connectivity for an organization's virtual public cloud (VPC). The organization has web servers with private addresses that must be reachable from the internet. The web servers must be highly available.Which two configurations can you use to ensure the web servers are highly available and reachable from the internet? (Choose two.)

• Deploy a network load balancer.
• Configure a network address translation (NAT) Gateway in your VPC. Place web servers behind the NAT Gateway.
• Add a route to the default virtual public cloud (VPC) route table forwarding all traffic to the internet gateway.
• Deploy web servers in multiple availability zones.

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

• For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
• A-A clusters rely on API calls for sfailovers.
• A-A clusters always require a load balancer.
• A-A clusters can use a software-defined network (SDN) to perform a failover.