FCP - Azure Cloud Security 7.4 Administrator Sample Questions

FCP - Azure Cloud Security 7.4 Administrator Sample Questions

Skip Quiz navigation

Started on

Thursday, February 8, 2024, 3:13 PM

State

Finished

Completed on

Sunday, February 11, 2024, 8:33 AM

Time taken

2 days 17 hours

Points

5/10

Grade

50 out of 100

Question 1

Correct

1 points out of 1

Flag question

Question text

Your organization must provide secure communication to various resources like VMs, databases, and applications. Additionally, there is a need to implement network segmentation. Which Azure feature offers a dedicated and isolated environment for connecting these cloud resources?

Select one:

Azure App Service Environment

Azure Logic Apps

Azure Virtual Network

Azure Firewall Premium

Question 2

Correct

1 points out of 1

Flag question

Question text

You have a FortiGate active-active load balanced with ELB/ILB deployed in Azure.

How is the status of each cluster member checked in this scenario?

Select one:

The Azure load balancer sends periodic health probes.

Cluster members check their peers through FGSP.

Failed cluster members stop sending heartbeat packets.

With the use of unicast FGCP and dedicated HA interfaces.

Question 3

Incorrect

0 points out of 1

Flag question

Question text

Which Azure feature enables an organization (tenant) to manage and secure users, groups, and permissions within a single domain?

Select one:

Azure Active Directory B2C

Azure Kubernetes Service (AKS)

Azure Cosmos DB

Azure Microsoft Entra ID

Question 4

Correct

1 points out of 1

Flag question

Question text

Which type of network virtual appliances (NVAs) are supported by Azure route servers?

Select one:

Any network appliance that supports BGP routing protocol.

Any network appliance that supports Azure virtual WAN.

Any network appliance that supports Azure firewall manager.

Any network appliance that supports IPsec VPN protocol.

Question 5

Incorrect

0 points out of 1

Flag question

Question text

What is the recommended configuration to avoid asymmetric routing in a FortiGate active-active with ELB/ILB deployment in Azure?

Select one:

Configure each FortiGate with its own public IP address.

Configure and assign a UDR to subnets connected to the FortiGate VMs.

Configure FGSP for session synchronization.

Configure SNAT for the north-south traffic.

Question 6

Correct

1 points out of 1

Flag question

Question text

In the public cloud, which model incorporates the principle that both the cloud service provider and the cloud customer take care of different tasks in order to secure the environment?

Select one:

The shared responsibility model

The cloud resilience architecture model

The cloud dependency model

The cloud security model

Question 7

Incorrect

0 points out of 1

Flag question

Question text

Which two statements are correct about the SDN connectors that can be used on FortiGate devices in conjunction with Azure? (Choose two.)

Select one or more:

The cloud configuration is adjusted automatically to the changes made on FortiGate.

You can filter objects in the cloud based on their subnet names and tags.

SDN connectors can be configured only on a FortiGate deployed in the cloud.

You can create policies using addresses automatically obtained from the cloud.

Question 8

Correct

1 points out of 1

Flag question

Question text

What is the main purpose of FortiWeb in the context of web applications in Azure?

Select one:

To offer web application firewall (WAF) capabilities for protection against web application attacks

To automatically optimize network latency within Azure virtual networks

To encrypt data at rest within Azure storage

To provide a secure content delivery network (CDN) for web applications.

Question 9

Incorrect

0 points out of 1

Flag question

Question text

You are planning to deploy a highly available site-to-site IPsec VPN connection to Azure using FortiGate on both sides of the tunnel.

Which topology is recommended to be used on the Azure end?

Select one:

Active-passive with ELB/ILB

Active-active with ELB/ILB

Active-passive with SDN connector

Active-active with HA ports

Question 10

Incorrect

0 points out of 1

Flag question

Question text

Which VPN protocol is used when configuring a FortiGate device to connect to an Azure VPN gateway?

Select one:

L2TP

IPsec

PPTP

SSTP



Azure Cloud Security.pdf