Free NSE7_CDS_AR-7.6 Exam Braindumps
Fortinet NSE 7 - Public Cloud Security 7.6.4 Architect Questions 6–10 (page: 3)

Updated On: 10-Feb-2026

Refer to the exhibit.



After the initial Terraform configuration in Microsoft Azure, the terraform plan command is run.

Which two statements about running the terraform plan command are true? (Choose two.)

  1. The terraform plan command will deploy the rest of the resources except the service principle details.
  2. You cannot run the terraform apply command before the terraform plan command.
  3. The terraform plan command makes terraform do a dry run.
  4. You must run the terraform init command once, before the terraform plan command.

Answer(s): C,D



A Network security administrator is searching for a solution to secure traffic going in and out of the container infrastructure.

In which two ways can Fortinet container security help secure container infrastructures? (Choose two.)

  1. FortiGate NGFW can inspect north-south container traffic with label aware policies.
  2. FortiGate NGFW and FortiWeb can be used to secure container traffic.
  3. FortiGate NGFW can connect to the worker nodes and protect the containers.
  4. FortiGate NGFW can be placed between each application container for north-south traffic inspection.

Answer(s): A,B



An organization is deploying FortiDevSec to enhance security for containerized applications, and they need to ensure containers are monitored for suspicious behavior at runtime.

Which FortiDevSec feature is best for detecting runtime threats?

  1. FortiDevSec software composition analysis (SCA)
  2. FortiDevSec static application security testing (SAST)
  3. FortiDevSec dynamic application security testing (DAST)
  4. FortiDevSec container scanner

Answer(s): D



Refer to the exhibit.



You are troubleshooting a Microsoft Azure SDN connector issue on your FortiGate VM in Azure.

Which command can you use to examine details about API calls sent by the connector?

  1. diag debug application cloud-connector -1
  2. diag test application azd 1
  3. diag debug application azd -1
  4. get system sdn-connector

Answer(s): C



As part of your organization's monitoring plan, you have been tasked with obtaining and analyzing detailed information about the traffic sourced at one of your FortiGate EC2 instances.

What can you do to achieve this goal?

  1. Use AWS CloudTrail to capture and then examine traffic from the EC2 instance.
  2. Create a virtual public cloud (VPC) flow log at the network interface level for the EC2 instance.
  3. Add the EC2 instance as a target in CloudWatch to collect its traffic logs.
  4. Configure a network access analyzer scope with the EC2 instance as a match finding.

Answer(s): B



Viewing page 3 of 12
Viewing questions 11 - 15 out of 54 questions


Post your Comments and Discuss Fortinet NSE7_CDS_AR-7.6 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!