Free FCP – AWS Cloud Security 7.4 Administrator Exam FCP_WCS_AD-7.4 Exam Practice Test

An administrator needs to attach an Elastic Network Interface (ENI) to an application instance in a VPC with multiple availability zones. An instance runs in availability zone 1.Which ENI property must the administrator consider when implementing this requirement?

• An ENI cannot attach to an instance in availability zone 2.
• After the ENI detaches from one instance, it can reattach only to the same instance.
• You can detach the primary ENI from an AWS instance.
• When you move an ENI, network traffic remains directed to the old instance until you terminate that instance.

AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)

• Higher VPN throughput
• Web filtering
• OSPF over IPSec
• Advanced dynamic routing
• Secure SD-WAN with application visibility

An AWS administrator is designing internet connectivity for an organization's virtual public cloud (VPC). The organization has web servers with private addresses that must be reachable from the internet. The web servers must be highly available.Which two configurations can you use to ensure the web servers are highly available and reachable from the internet? (Choose two.)

• Deploy a network load balancer.
• Configure a network address translation (NAT) Gateway in your VPC. Place web servers behind the NAT Gateway.
• Add a route to the default virtual public cloud (VPC) route table forwarding all traffic to the internet gateway.
• Deploy web servers in multiple availability zones.

Which three statements are correct about VPC flow logs? (Choose three.)

• Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.
• Flow logs do not capture DHCP traffic.
• Flow logs can capture traffic to the reserved IP address for the default VPC router.
• Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.
• Flow logs can capture real-time log streams for the network interfaces.

An administrator must deploy a web application firewall (WAF) solution to protect the web applications of their organization.Why would the administrator choose FortiWeb Cloud over AWS WAF with Fortinet managed rules?

• WAF signatures must be manually updated by FortiGuard.
• The solution must meet PCI 6.6 compliance.
• SSL inspection is a requirement.
• Traffic must be inspected for malware.

You want to deploy the Fortinet HA CloudFormation template to stage and bootstrap the FortiGate configuration in the same region in which you created your VPC, which is Ohio US-East-2.Based on this information, which statement is correct?

• You create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration. The S3 bucket can be hosted in any region.
• The Fortinet HA cloud formation template automatically creates an S3 bucket.
• You create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration. The S3 bucket needs to be hosted in the Ohio US-East-2 region.
• You create a DynamoDB to stage and bootstrap FortiGate with an FGCP unicast configuration. It needs to be hosted in the Ohio US-East-2 region.

Your company deployed a FortiSandbox for AWS.Which statement is correct about FortiSandbox for AWS?

• FortiSandbox for AWS comes as a hybrid solution. The FortiSandbox manager is installed on- premises and analyzes the results of the sandboxing process received from AWS EC2 instances.
• The FortiSandbox manager is installed on the AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.
• FortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.
• FortiSandbox deploys new EC2 instances with the custom Windows and Linux VMs, then it sends malware, runs it, and captures the results for analysis.

Your organization is deciding between deploying FortiWeb VM or Fortinet Managed Rules for AWS WAF.What are two benefits of choosing FortiWeb VM? (Choose two.)

• Only pay for what is used.
• Up-to-date WAF signatures powered by FortiGuard.
• Zero-day protection.
• Advanced WAF functionality.

An administrator wants to deploy a solution to automatically create firewall rules on FortiGate to accelerate time-to-protection for threats.Which AWS service can be integrated with FortiGate to accomplish this?

• AWS Firewall Manager
• AWS network access control list
• SDN Connector for AWS
• AWS GuardDuty

What is a drawback of deploying a FortiWeb VM inside a virtual public cloud (VPC) compared to FortiWeb Cloud?

• It is unable to support web applications from OWASP Top 10 threats.
• It does not support zero-day protection.
• It is slower than FortiWeb Cloud to apply advanced WAF protection.
• Only applications going through the VPC are protected.