[2026年09月09日] 最新でリアルなFCSS_CDS_AR-7.6試験問題集解答
あなたを簡単に合格させるFCSS_CDS_AR-7.6試験問と正確なFCSS - Public Cloud Security 7.6 ArchitectのPDF問題
質問 # 35
Refer to the exhibit. An administrator implements FortiWeb ingress controller to protect containerized web applications in an AWS Elastic Kubernetes Service (EKS) cluster.
What can you conclude about the topology shown in FortiView?
- A. The FortiWeb VM gets the latest cluster information through an SDN connector.
- B. This topology has two services and two ingress controllers deployed.
- C. Adding a new service will update the FortiWeb configuration automatically.
- D. Both services will be load balanced among the two nodes and the four pods.
正解：A
質問 # 36
Refer to the exhibit.
Refer to the exhibit.
The exhibit shows an active-passive high availability FortiGate pair with external and internal Azure load balancers.
There is no SDN connector used in this solution.
Which configuration must the administrator implement on each FortiGate?
- A. One static route to Azure Lambda IP address.
- B. Two BGP routes to Azure probe IP address.
- C. Two static routes to Azure probe IP address.
- D. Single BGP route to Azure probe IP address.
正解：C
質問 # 37
You are automating configuration changes on one of the FortiGate VMs using Linux Red Hat Ansible.
How does Linux Red Hat Ansible connect to FortiGate to make the configuration change?
- A. It uses an API.
- B. It uses a YAML file.
- C. It uses a FortiGate VIP.
- D. It uses SSH.
正解：A
解説：
Ansible connects to FortiGate through APIs (REST API/HTTPS) when using Fortinet Ansible modules. The YAML playbook defines the tasks, but the actual configuration changes are pushed via the FortiGate API.
質問 # 38
Which Terraform resource blocks can be used to enable AWS CloudWatch monitoring for a FortiGate instance?
(Choose two.)
Response:
- A. aws_cloudwatch_metric_alarm
- B. aws_cloudwatch_log_group
- C. aws_vpc
- D. aws_iam_role
正解：A、B
質問 # 39
Which of the following is a key advantage of using Terraform over other IaC tools?
Response:
- A. It does not require configuration files
- B. It supports multi-cloud deployments
- C. It is a cloud-native tool for AWS
- D. It is only used for security automation
正解：B
質問 # 40
An AWS administrator must ensure that each member of the cloud deployment team has the correct permissions to deploy and manage resources using CloudFormation. The administrator is researching which tasks must be executed with CloudFormation and therefore require CloudFormation permissions.
Which task is run using CloudFormation?
- A. Deploying a new pod with a service in an Elastic Kubernetes Service (EKS) cluster using the kubectl command
- B. Creating an EKS cluster with the eksctl create cluster command
- C. Installing a Helm chart to deploy a FortiWeb ingress controller in an EKS cluster
- D. Changing the number of nodes in an EKS cluster from AWS CloudShell
正解：D
質問 # 41
An AWS administrator must ensure that each member of the cloud deployment team has the correct permissions to deploy and manage resources using CloudFormation. The administrator is researching which tasks must be executed with CloudFormation and therefore require CloudFormation permissions.
Which task is run using CloudFormation?
- A. Creating an EKS cluster with the eksctl create clustercommand
- B. Deploying a new pod with a service in an Elastic Kubernetes Service (EKS) cluster using the kubectl command
- C. Changing the number of nodes in an EKS cluster from AWS CloudShell
- D. Installing a Helm chart to deploy a FortiWeb ingress controller in an EKS cluster
正解：D
解説：
Installing a Helm chart through CloudFormation can be done using the AWS CloudFormation Helm resource provider, which requires CloudFormation permissions. The other tasks use direct CLI or Kubernetes tools and do not rely on CloudFormation.
質問 # 42
What is the main advantage of using SD-WAN Transit Gateway Connect over traditional SD-WAN?
- A. It eliminates the use of ECMP.
- B. You can use GRE-based tunnel attachments.
- C. You can use BGP over IPsec for maximum throughput.
- D. You can combine it with IPsec to achieve higher bandwidth.
正解：B
質問 # 43
Which AWS service provides network traffic monitoring and visibility for VPCs?
Response:
- A. AWS IAM
- B. AWS CloudTrail
- C. AWS VPC Flow Logs
- D. AWS Trusted Advisor
正解：C
質問 # 44
An administrator is planning to use FortiDevSec to detect vulnerabilities in container images and is researching any platform limitations that they must take into account when using that tool. What is a limitation of FortiDevSec container security scanning?
Response:
- A. It focuses on scanning for encrypted secrets in containerized applications.
- B. It does not support scanning private images that require Docker login.
- C. It is limited to dynamic application testing of container images.
- D. It can detect vulnerabilities in containerized applications in Amazon Web Services (AWS) environments only.
正解：B
質問 # 45
Refer to the exhibit. In which type of FortiCNP insights can an administrator examine the findings triggered by this policy?
- A. Threat
- B. Risk
- C. User activity
- D. Data
正解：A
解説：
The policy shown is an AV Scan Policy that scans for malware during discovery and raises alerts when malicious targets are accessed. Findings from such policies are categorized under Threat insights in FortiCNP, since they deal with detection of malware and malicious activity.
質問 # 46
Refer to the exhibit. An administrator is trying to deploy a FortiGate VM in Microsoft Azure using Terraform. However, during the configuration, the Azure client secret is no longer visible in the Azure portal.
How would the administrator obtain the Azure client secret to configure on Terraform?
- A. Use the Terraform output file values to obtain the client secret.
- B. Create a new client secret and take note of it.
- C. Create a new Azure account and assign it the Administrator role.
- D. Log in to the Azure CLI as a power user to obtain the client secret.
正解：B
解説：
In Azure, once a client secret is created, its value is only visible at creation time. If it is no longer visible, the administrator cannot recover it. The correct step is to create a new client secret and securely record it for use with Terraform.
質問 # 47
Refer to the exhibit. You are tasked with deploying FortiGate using Terraform. When you run the terraform version command during the Terraform installation, you get an error message. What could you do to resolve the command not found error?
- A. You must assign correct permissions to the ec2-user.
- B. You must reinstall Terraform.
- C. You must change the directory location to the root directory.
- D. You must move the binary file to the bin directory.
正解：D
質問 # 48
Refer to the exhibit. You are managing an active-passive FortiGate HA cluster in AWS that was deployed using CloudFormation. You have created a change set to examine the effects of some proposed changes to the current infrastructure. The exhibit shows some sections of the change set.
What will happen if you apply these changes?
- A. CloudFormation checks if you will surpass your account quota.
- B. This deployment can be done without any traffic interruption.
- C. Both FortiGate VMs will get a new PhysicalResourceId.
- D. The updated FortiGate VMs will not have the latest configuration changes.
正解：C
質問 # 49
Which Fortinet solutions assist in diagnosing network connectivity issues in cloud environments?
(Choose two.)
Response:
- A. FortiSIEM
- B. FortiAuthenticator
- C. FortiWeb
- D. FortiGate Debug Logs
正解：A、D
質問 # 50
A DevOps team is configuring Terraform to deploy Amazon Web Services (AWS) resources.
They want to use environment variables to authenticate Terraform with AWS, while ensuring that the setup works across multiple developers' machines without exposing credentials in configuration files.
Which two environment variables must the team configure, at a minimum, to allow Terraform to authenticate with AWS? (Choose two.)
- A. AWS_ACCOUNT_ID
- B. AWS_SECRET_ACCESS_KEY
- C. AWS_ROLE_ARN
- D. AWS_ACCESS_KEY_ID
正解：B、D
質問 # 51
Which Fortinet solutions can be deployed using Terraform?
(Choose two.)
Response:
- A. FortiMail
- B. FortiGate
- C. FortiManager
- D. FortiSIEM
正解：B、C
質問 # 52
Refer to the exhibit.
Refer to the exhibit.
After the initial Terraform configuration in Microsoft Azure, the terraform plan command is run.
Which two statements about running the terraform plan command are true? (Choose two.)
- A. The terraform plan command makes Terraform do a dry run.
- B. You must run the terraform init command once, before the terraform plan command.
- C. The terraform plan command will deploy the rest of the resources except the service principal details.
- D. You cannot run the terraform apply command before the terraform plan command.
正解：A、B
質問 # 53
As part of your organization's monitoring plan, you have been tasked with obtaining and analyzing detailed information about the traffic sourced at one of your FortiGate EC2 instances.
What can you do to achieve this goal?
- A. Create a virtual public cloud (VPC) flow log at the network interface level for the EC2 instance.
- B. Configure a network access analyzer scope with the EC2 instance as a match finding.
- C. Use AWS CloudTrail to capture and then examine traffic from the EC2 instance.
- D. Add the EC2 instance as a target in CloudWatch to collect its traffic logs.
正解：A
解説：
VPC Flow Logs are designed to capture metadata about IP traffic to and from network interfaces in a VPC, including those attached to EC2 instances such as FortiGate appliances.
Creating a flow log at the network interface level for the FortiGate EC2 instance lets you collect detailed information (source/destination IPs, ports, protocol, action, bytes, etc.) for all traffic sourced from and going to that instance, which you can then analyze in CloudWatch Logs or S3.
質問 # 54
Which of the following components is required for Ansible agentless automation?
Response:
- A. Ansible client software
- B. Azure Bicep
- C. CloudFormation stack
- D. SSH or WinRM
正解：D
質問 # 55
......
FCSS_CDS_AR-7.6認証試験問題集の解答を提供しています：https://drive.google.com/open?id=1zxoO0PAzMvs14oVboe6wQ3oycI2iPviu
更新されたFCSS_CDS_AR-7.6試験練習テスト問題：https://jp.fast2test.com/FCSS_CDS_AR-7.6-premium-file.html