Fortinet FCSS_CDS_AR-7.6 Actual Exam Questions

Last updated on Nov. 9, 2025.

Topic 1 - Exam A

Question #1 Topic 1

You have deployed a FortiGate HA cluster in Azure using a gateway load balancer for traffic inspection. However, traffic is not being routed correctly through the firewalls.
What can be the cause of the issue?

  • A. The health probes for the gateway load balancer are failing, which causes traffic to bypass the HA cluster.
  • B. The protected VMs are in a different Azure subscription, which prevents the gateway load balancer from forwarding traffic.
  • C. The Fortinet VMs have IP forwarding disabled, which is required for traffic inspection.
  • D. The gateway load balancer is not associated with the correct network security group (NSG) rules, which allow traffic to pass through.
Reveal Solution Hide Solution   Discussion  

Correct Answer: C 🗳️

Question #2 Topic 1

Your organization has several FortiGate VMs deployed in Azure. You need to implement a solution with Azure native tools that allows you to determine whether packets are being permitted or blocked by the FortiGate VMs.
Which solution can you use to meet these requirements?

  • A. Insert the VM traffic logs in Azure Sentinel.
  • B. Install the Azure Monitor agent in all VMs.
  • C. Use IP flow verify for each of the VMs.
  • D. Configure Azure Advisor to analyze the network traffic.
Reveal Solution Hide Solution   Discussion  

Correct Answer: C 🗳️

Question #3 Topic 1

An AWS administrator must ensure that each member of the cloud deployment team has the correct permissions to deploy and manage resources using CloudFormation. The administrator is researching which tasks must be executed with CloudFormation and therefore require CloudFormation permissions.
Which task is run using CloudFormation?

  • A. Installing a Helm chart to deploy a FortiWeb ingress controller in an EKS cluster
  • B. Creating an EKS cluster with the eksctl create cluster command
  • C. Changing the number of nodes in a EKS cluster from AWS CloudShell
  • D. Deploying a new pod with a service in an Elastic Kubernetes Service (EKS) cluster using the kubectl command
Reveal Solution Hide Solution   Discussion  

Correct Answer: A 🗳️

Question #4 Topic 1

Refer to the exhibit.

An administrator deployed an HA active-active load balance sandwich in Microsoft Azure. The setup requires configuration synchronization between devices.
What can you conclude from the configured settings shown in the exhibit? (Choose two.)

  • A. FortiGate A and FortiGate B are two independent devices.
  • B. By default, FortiGate uses FGCP.
  • C. It does not synchronize the FortiGate hostname.
  • D. FortiGate-VM instances are scaled out automatically according to predefined workload levels.
Reveal Solution Hide Solution   Discussion  

Correct Answer: BC 🗳️

file Viewing page 1 out of 14 pages.
Viewing questions 1-4 out of 54 questions
Next Questions
Browse atleast 50% to increase passing rate cup
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Loading ...