Free Fortinet NSE7_CDS_AR-7.6 Practice Exam Questions and Answers 2026

Start Learning with the Newest and 100% Free NSE7_CDS_AR-7.6 Exam Dumps Questions

Page: 1 / 11

Total 54 Questions | Updated On: Apr 01, 2026

Add To Cart

Question 1

As part of your organization's monitoring plan, you have been tasked with obtaining and analyzing

detailed information about the traffic sourced at one of your FortiGate EC2 instances.

What can you do to achieve this goal?

A : Use AWS CloudTrail to capture and then examine traffic from the EC2 instance.

B : Create a virtual public cloud (VPC) flow log at the network interface level for the EC2 instance.

C : Add the EC2 instance as a target in CloudWatch to collect its traffic logs.

D : Configure a network access analyzer scope with the EC2 instance as a match finding.

Answer: B

Question 2

Refer to the exhibit.

your Amazon Web Services (AWS), you must allow inbound HTTPS access to the Customer VPC

FortiGate VM from the internet. However, your HTTPS connection to the FortiGate VM in the

Customer VPC is not successful.

Also, you must ensure that the Customer VPC FortiGate VM sends all the outbound Internet traffic

through the Security VPC.

How do you correct this issue with minimal configuration changes? (Choose three.)

A : Add a route with your local internet public IP address as the destination and the internet gatewayas the target.

B : Add a route with your local internet public IP address as the destination and the transit gateway asthe target.

C : Add a route to the destination 0.0.0.0/0 with the transit gateway as the target.

D : Deploy an internet gateway, associate an EIP with the Customer VPC private subnet, and then adda new route with destination 0.0.0.0/0 with the internet gateway as the target.

E : Deploy an internet gateway, attach it to the Customer VPC, and then associate an EIP with the port1 of the FortiGate in the Customer VPC.

Answer: B,C,E

Question 3

Refer to the exhibit.

You are tasked to deploy a FortiGate VM with private and public subnets in Amazon Web Services

(AWS). You examined the variables.tf file. Assume that all the other terraform files are in place. What

will be the final result after running the terraform init and terraform apply commands? (Choose one

answer)

A : Terraform will not deploy a FortiGate VM.

B : Terraform will deploy a FortiGate VM in the eu-West-1a availability zone without any subnets.

C : Terraform will deploy a FortiGate VM in the eu-West-1 region with private and public subnets.

D : Terraform will deploy a FortiGate VM in the eu-West-1a availability zone with two subnets andBYOL license.

Answer: A

Question 4

Refer to the exhibit.

An administrator used the what-if tool to preview changes to an Azure Bicep file.

What will happen if the administrator decides to apply these changes in Azure?

A : Subnet 10.0.1.0 will replace subnet 10.0.2.0.

B : This deployment will fail and no changes will be applied.

C : A new subnet will be added to ServerApps.

D : The ServerApps VNet will be renamed.

Answer: B

Question 5

Refer to the exhibit.

You deployed an HA active-active load balance sandwich with two FortiGate VMs in Microsoft Azure.

After the deployment, you prefer to use FGSP to synchronize sessions, and allow asymmetric return

traffic. In the environment, FortiGate port 1 and port 2 are facing external and internal load balancers

respectively.

What IP address must you use in the peerip configuration?

A : The opposite FortiGate port 2 IP address.

B : The public load balancer port 2 IP address.

C : The internal load balancer port 1 IP address.

D : The opposite FortiGate port 1 IP address.

Answer: D

Page: 1 / 11

Total 54 Questions | Updated On: Apr 01, 2026

Add To Cart