Free FCP_WCS_AD-7.4 Practice Questions and Answers | Updated 2025

• Question 1

  Which two statements about the FortiCloud portal are true? (Choose two.)

  • You can gain remote access to your FortiGate VM directly from the portal.
  • To assign permissions in the identity and access management (JAM) portal, you must write a JSON script.
  • You can access the FortiFlex portal only after you purchase a FortiFlex license and register it on FortiCare.
  • You can access only cloud services that you have subscribed to on AWS marketplace.

  Show Answer Answer: A, ,C Next

• Question 2

  A customer is attempting to deploy an active-passive high availability (HA) cluster using the software- defined network (SDN) connector in the AWS cloud.What is an important consideration to ensure a successful formation of HA, failover, and traffic flow?Both cluster members must be in the same availability zone.VDOM exceptions must be configured.Unicast FortiGate Clustering Protocol (FGCP) must be used.Both cluster members must show as healthy in the elastic load balancer (ELB) configuration.

  • Option D is incorrect because the ELB configuration checks are more about ensuring that the load balancer correctly routes traffic but do not specifically ensure HA formation and failover.

  Show Answer Answer: C Next

• Question 3

  You are troubleshooting network connectivity issues between two VMs deployed in AWS.One VM is a FortiGate located on subnet "LAN" that is part of the VPC "Encryption". The other VM is a Windows server located on the subnet "servers" which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate.What are two reasons for this? (Choose two.)

  • The firewall in the Windows VM is blocking the traffic.
  • The default AWS Network Access Control List (NACL) does not allow this traffic.
  • By default, AWS does not allow ICMP traffic between subnets.
  • Add an inbound allow ICMP rule in the security group attached to the windows server.

  Show Answer Answer: A, ,D Next

• Question 4

  An administrator must deploy a web application firewall (WAF) solution to protect the web applications of their organization.Why would the administrator choose FortiWeb Cloud over AWS WAF with Fortinet managed rules?

  • WAF signatures must be manually updated by FortiGuard.
  • The solution must meet PCI 6.6 compliance.
  • SSL inspection is a requirement.
  • Traffic must be inspected for malware.

  Show Answer Answer: C Next

• Question 5

  AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)

  • Higher VPN throughput
  • Web filtering
  • OSPF over IPSec
  • Advanced dynamic routing
  • Secure SD-WAN with application visibility

  Show Answer Answer: B,C,E Next