Fortinet FCSS_CDS_AR-7.6 Exam Overview:
| Certification Vendor: | Fortinet |
|---|---|
| Exam Name: | FCSS - Public Cloud Security 7.6 Architect |
| Exam Number: | FCSS_CDS_AR-7.6 |
| Exam Format: | Scenario-based, Troubleshooting, Configuration analysis, Multiple-choice |
| Exam Price: | $400 USD |
| Related Certifications: | Fortinet Certified Solution Specialist (FCSS) |
| Real Exam Qty: | 35–40 |
| Available Languages: | Japanese, English |
| Certificate Validity Period: | 2 years |
| Passing Score: | Pass/Fail |
| Exam Duration: | 75 minutes |
| Recommended Training: | Fortinet Public Cloud Security Training |
| Exam Registration: | Pearson VUE Registration |
| Sample Questions: | Fortinet FCSS_CDS_AR-7.6 Sample Questions |
| Exam Way: | Online proctored or onsite at Pearson VUE test centers |
| Pre Condition: | Recommended: NSE 4 or equivalent experience; knowledge of AWS/Azure architecture and Fortinet security products |
| Official Syllabus URL: | https://training.fortinet.com/local/staticpage/view.php?page=public_cloud_security_architect_exam |
Fortinet FCSS_CDS_AR-7.6 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
Fortinet FCSS - Public Cloud Security 7.6 Architect Sample Questions:
Which statement about Amazon Web Services (AWS) Transit Gateway is true for SD-WAN transit gateway (TGW) Connect with FortiGate?
- A. TGW supports BGP to share routes with FortiGate.
- B. The Generic Routing Encapsulation (GRE)-based tunnel attachments are slower than IPsec tunnels.
- C. The TGW plugin must be used with a VPN to achieve higher bandwidth.
- D. Attaching a virtual private cloud (VPC) to the TGW automatically adds new routes to the subnet route table.
Correct Answer: D 🗳️
Refer to the exhibit. You are managing an active-passive FortiGate HA cluster in AWS that was deployed using CloudFormation. You have created a change set to examine the effects of some proposed changes to the current infrastructure. The exhibit shows some sections of the change set.
What will happen if you apply these changes?
- A. Both FortiGate VMs will get a new PhysicalResourceId.
- B. This deployment can be done without any traffic interruption.
- C. The updated FortiGate VMs will not have the latest configuration changes.
- D. CloudFormation checks if you will surpass your account quota.
Correct Answer: A 🗳️
A DevOps team is configuring Terraform to deploy Amazon Web Services (AWS) resources.
They want to use environment variables to authenticate Terraform with AWS, while ensuring that the setup works across multiple developers' machines without exposing credentials in configuration files.
Which two environment variables must the team configure, at a minimum, to allow Terraform to authenticate with AWS? (Choose two.)
- A. AWS_ACCOUNT_ID
- B. AWS_SECRET_ACCESS_KEY
- C. AWS_ACCESS_KEY_ID
- D. AWS_ROLE_ARN
Correct Answer: B,C 🗳️
An organization is deploying FortiDevSec to enhance security for containerized applications, and they need to ensure containers are monitored for suspicious behavior at runtime. Which FortiDevSec feature is best for detecting runtime threats?
- A. FortiDevSec Software Composition Analysis (SCA)
- B. FortiDevSec Static Application Security Testing (SAST)
- C. FortiDevSec Dynamic Application Security Testing (DAST)
- D. FortiDevSec Container Scanner
Correct Answer: D 🗳️
Explanation: Only visible for TopExamCollection members. You can sign-up / login (it's free).
Refer to the exhibit. You are troubleshooting a Microsoft Azure SDN connector issue on your FortiGate VM in Azure. Which command can you use to examine details about API calls sent by the connector?
- A. diag debug application azd 1
- B. get system sdn-connector
- C. diag debug application cloud-connector -l
- D. diag test application azd 1
Correct Answer: A 🗳️
Viewing page 1 out of 16 pages.
Viewing questions 1-5 out of 76 questions.

We're so confident of our products that we provide no hassle product exchange.


By Ansel


