FCP_WCS_AD-7.4 FCP - AWS Cloud Security 7.4 Administrator Exam Questions and Answers

It is unable to support web applications from OWASP Top 10 threats.

It does not support zero-day protection.

It is slower than FortiWeb Cloud to apply advanced WAF protection.

Only applications going through the VPC are protected.

For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.

A-A clusters rely on API calls forsfailovers.

A-A clusters always require a load balancer.

A-A clusters can use a software-defined network (SDN) to perform a failover.

Update software on the instance.

Change the existing elastic load balancer (ELB) to a gateway load balancer

Configure security groups.

Manage the operating system on the instance.

Move all web servers into the same availability zone.

The firewall in the Windows VM is blocking the traffic.

The default AWS Network Access Control List (NACL) does not allow this traffic.

By default, AWS does not allow ICMP traffic between subnets.

Add an inbound allow ICMP rule in the security group attached to the windows server.

The load balancer is configured to load balance traffic among multiple availability zones.

The Amazon Resource Name is used to access the load balancer node and targets.

You can use the DNS name to reach the targets behind the ELB.

The load balancer is configured for the internal traffic of the virtual public cloud (VPC).

There is an implicit deny rule at the bottom of the policy set.

The policy set must be manually synchronized to the CNF instance each time it is modified.

A new policy set is created with each deployed CNF instance.

Multiple policy sets can be applied to a single CNF instance.

Only pay for what is used.

Up-to-date WAF signatures powered by FortiGuard.

Zero-day protection.

Advanced WAF functionality.