FCP_GCS_AD-7.6

Review 35 FCP-GCS-AD-7-6 practice questions with answer explanations and community insights.

Question 1

An administrator wants to use the FortiGate automation stitch feature to quarantine compromised hosts. Which native Google Cloud service should the administrator integrate with FortiGate to achieve this?

  1. Google Cloud Interconnect
  2. Google Cloud Run functions
  3. Google Cloud App Engine
  4. Google Cloud IAM

Question 2

You have been tasked with deploying an active-active FortiGate high-availability cluster in Google Cloud. How can you ensure that traffic will flow symmetrically?

  1. Enable the layer 3 unified threat management scanning feature on FortiGate.
  2. Google Cloud performs NAT on incoming traffic for external passthrough network load balancers. No action is needed.
  3. There is no need to ensure traffic symmetry because FortiGate can effectively inspect asymmetric traffic.
  4. Deploy internal passthrough network load balancers on both sides of the cluster they support symmetric hashing.

Question 3

Refer to the exhibit. An organization has four virtual private cloud networks and deployed a FortiGate to protect the VPCs. FortiGate is configured with four network interfaces and each network interface is assigned one of the four VPCs. The organization is expanding and plans to add two more VPCs. Which two options can the organization use to support the two new VPCs? (Choose two.)

  1. Modifying the FortiGate configuration to add two more network interfaces
  2. Utilizing VPC peering
  3. Deleting FortiGate and replacing it with a Google Cloud machine type that supports six network interfaces
  4. Adding a second FortiGate and configuring both FortiGate devices as an active-active high-availability cluster.

Question 4

An organization is deploying an active-passive high availability (HA) cluster using passthrough load balancers in Google Cloud. What is a critical factor for ensuring successful HA formation, failover, and traffic flow?

  1. Unicast FortiGate Clustering Protocol (FGCP) must be used.
  2. VDOM exceptions must be configured.
  3. Incoming traffic must be source NATed to ensure traffic flow symmetry.
  4. There can be more than two cluster members.

Question 5

Refer to the exhibit. An administrator is troubleshooting an issue when a high-availability (HA) failover occurs. Which conclusion can you draw from the debug output?

  1. The HA cluster is accessible using HTTPS on 34.68.13.24 and 34.66.4.139.
  2. The health check has successfully updated the internal custom route to forward all internal traffic to 172.16.1.3.
  3. Both cluster members are located in the same zone.
  4. The HA cluster is deployed using the software-defined network (SDN) connector.
We are moving to a new platform

CertificationTest is being migrated. Some pages may be slow or briefly unavailable; everything will be back to normal within a few hours. If you run into any issue, email support@certificationtest.net.