Prepare for the Actual Public Cloud Security FCP_GCS_AD-7.6 Exam Practice Materials Collection
Public Cloud Security Certified Official Practice Test FCP_GCS_AD-7.6 - Dec-2025
NEW QUESTION # 20
For what three reasons must you deploy a set of Google Cloud passthrough network load balancers for an active-passive high-availability (HA) FortiGate cluster instead of a set of Google Cloud proxy network load balancers? (Choose three.)
- A. Passthrough network load balancers support health checks.
- B. Passthrough network load balancers terminate SSL connections.
- C. Passthrough network load balancers rely on API calls from FortiGate devices during HA failovers.
- D. Passthrough network load balancers offer the highest throughput.
- E. Passthrough network load balancers can forward all protocols.
Answer: A,D,E
Explanation:
Passthrough load balancers support health checks to monitor backend health for failover.
They can forward all protocols, not limited to HTTP/HTTPS like proxy load balancers.
Passthrough load balancers provide higher throughput because they don't terminate sessions.
NEW QUESTION # 21
An administrator configured an external fabric connector for Google Cloud to pull information from Google Cloud, including addresses, VM names, and subnets to create firewall policies.
When trying to create dynamic firewall addresses, the list of available instances does not populate any information from Google Cloud.
Which two issues are the most probable cause? (Choose two.)
- A. Google Cloud Metadata API access is disabled for Compute Engine for the FortiGate instance.
- B. There are no VM instances deployed in Google Cloud.
- C. The VM instances in Google Cloud were not deployed using Google Cloud marketplace.
- D. The VM instances in Google Cloud have multiple IP address assigned to them.
Answer: A,B
Explanation:
The external fabric connector relies on Google Cloud Metadata API access to retrieve instance information; if this is disabled, data won't populate.
If no VM instances exist in the project, there will be no instance data for the connector to retrieve.
NEW QUESTION # 22
A cloud administrator is tasked with protecting web applications hosted in Google Cloud.
Which three cloud offerings can the administrator use to accomplish the task? (Choose three.)
- A. Google Cloud Run
- B. FortiWeb VM
- C. Google Cloud IAM
- D. FortiWeb Cloud
- E. Google Cloud Armor
Answer: B,D,E
Explanation:
FortiWeb VM is a web application firewall (WAF) deployed on Google Cloud to protect web apps.
Google Cloud Armor provides DDoS and application-level protection.
FortiWeb Cloud offers cloud-native WAF services to protect applications hosted in Google Cloud.
NEW QUESTION # 23
Refer to the exhibit.
Which two statements about FortiWeb instances deployed in Google Cloud are true?
- A. You can configure the FortiWeb instance with only one network interface.
- B. You can change the operation mode of FortiWeb.
- C. By default, you can access FortiWeb using HTTPS on port 443.
- D. You can deploy FortiWeb using pay-as-you-go or bring-your-own-license.
Answer: B,D
Explanation:
FortiWeb's operation mode can be changed, such as between reverse proxy and transparent modes, to suit different deployment scenarios.
FortiWeb in Google Cloud supports flexible licensing models, including pay-as-you-go and bring-your-own- license (BYOL).
NEW QUESTION # 24
Refer to the exhibit.
An administrator configured GoogleCloud as an external fabric connector on FortiGate.
Which conclusion can you draw from the output?
- A. The external fabric connector is unable to find a valid Google Cloud project.
- B. The external fabric connector is misconfigured.
- C. The external fabric connector found multiple IP addresses assigned to Google Cloud instances.
- D. The external fabric connector shows that an administrator created three dynamic firewall addresses.
Answer: C
Explanation:
The output shows the connector successfully retrieved project information and instance IP addresses (GCP Lab got 3 addresses), indicating it found multiple IPs assigned to Google Cloud instances.
NEW QUESTION # 25
An administrator has been tasked with modifying their organization's existing active-passive high-availability (HA) FortiGate cluster and turn it into an active-active HA cluster.
Which two behavior changes will the administrator see in the cluster after the change? (Choose two.)
- A. There is no longer a need to reserve a dedicated port for HA communications.
- B. The sessions will no longer be synchronized between cluster members.
- C. The cluster no longer act as a single logical instance.
- D. The configuration will no longer be synchronized between cluster members.
Answer: A,C
Explanation:
Active-active HA does not require a dedicated HA communication port as each member handles traffic independently.
In active-active mode, cluster members operate more independently and do not present as a single logical device like in active-passive mode.
NEW QUESTION # 26
Which architecture inspection type in Google Cloud is most closely associated with Google Cloud Interconnect?
- A. Hybrid cloud inspection
- B. Inbound north-south traffic inspection
- C. East-west traffic inspection
- D. Outbound north-south traffic inspection
Answer: A
Explanation:
Google Cloud Interconnect connects on-premises networks with Google Cloud, enabling hybrid cloud environments. Inspection related to this connectivity focuses on hybrid cloud traffic flows.
NEW QUESTION # 27
Refer to the exhibit.
Which two types of traffic flow must the FortiGate cluster inspect, if the client at 198.51.100.10 sends traffic to the Workload A instance? (Choose two.)
- A. East-bound
- B. North-bound
- C. West-bound
- D. South-bound
Answer: A,D
Explanation:
South-bound traffic refers to traffic coming from outside the network (the client 198.51.100.10) into the internal environment.
East-bound traffic refers to traffic moving laterally within the internal network, such as between VPCs or workloads, which the FortiGate cluster can inspect for internal threats.
NEW QUESTION # 28
Google Cloud network services offer vast functionality and inter-connectivity between the cloud and on- premises networks.
Which three additional functions does FortiGate offer when deployed in Google Cloud to complement the native services offered by Google Cloud? (Choose three.)
- A. Secure SD-WAN with application visibility
- B. SSL inspection
- C. Web filtering
- D. SSL VPN
- E. OSPF over IPSec
Answer: A,B,D
Explanation:
FortiGate provides SSL VPN capabilities for secure remote access.
It offers SSL inspection to decrypt and inspect encrypted traffic for threats.
FortiGate supports Secure SD-WAN with deep application visibility and control, enhancing network performance and security beyond native Google Cloud services.
NEW QUESTION # 29
You have been tasked with deploying an active-active FortiGate high-availability cluster in Google Cloud.
How can you ensure that traffic will flow symmetrically?
- A. Google Cloud performs NAT on incoming traffic for external passthrough network load balancers. No action is needed.
- B. Deploy internal passthrough network load balancers on both sides of the cluster they support symmetric hashing.
- C. There is no need to ensure traffic symmetry because FortiGate can effectively inspect asymmetric traffic.
- D. Enable the layer 3 unified threat management scanning feature on FortiGate.
Answer: B
NEW QUESTION # 30
Refer to the exhibit.
In this hybrid environment, in which two ways does the traffic flow from a network node in the on-premises network to Workload B in Google Cloud? (Choose two.)
- A. Traffic will not reach the FortiGate devices because both load balancers are internal.
- B. Once the traffic has been inspected, the active FortiGate uses VPC peering to forward the traffic to the Server project A VPC.
- C. Traffic will be routed using VPC peering from the Internal VPC to the destination subnet.
- D. When the packet reaches the external VPC, it is forwarded to the active FortiGate cluster member using a custom static route.
Answer: C,D
Explanation:
Traffic from on-premises enters the external VPC and is routed to the active FortiGate VM via custom routes for inspection.
After inspection, traffic is routed through VPC peering from the internal VPC to the service project subnet where Workload B resides.
NEW QUESTION # 31
Which Fortinet proprietary protocol do you use when deploying an active-passive high-availability (HA) cluster in Google Cloud?
- A. Unicast FGCP
- B. Anycast FGSP
- C. Broadcast FGCP
- D. Multicast FGSP
Answer: A
Explanation:
Unicast FGCP (FortiGate Clustering Protocol) is the proprietary protocol used for active-passive HA clusters in Google Cloud, enabling state synchronization and failover communication between cluster members.
NEW QUESTION # 32
An organization is planning to deploy two FortiGate VMs in two different regions.
Which two Google Cloud core components can span both FortiGate VMs in both regions? (Choose two.)
- A. Google Cloud zone
- B. Google Cloud virtual private cloud
- C. Google Cloud project
- D. Google Cloud subnet
Answer: B,C
Explanation:
A Google Cloud VPC can span multiple regions, allowing FortiGate VMs in different regions to be part of the same network.
A Google Cloud project provides the administrative boundary that can include resources across multiple regions and VPCs, enabling centralized management of both FortiGate VMs.
NEW QUESTION # 33
You have been tasked with destroying all resources relating to a recent active-active high-availability (HA) FGSP Terraform deployment in Google Cloud.
What steps do you have to take to ensure a successful deletion? (Choose two.)
- A. Use the command terraform plan before destroying the Terraform template.
- B. Use the command terraform destroy to delete all resources deployed by the Terraform template.
- C. Delete all dependencies to resources relating to the Terraform template.
- D. Delete all resources manually because active-active HA clusters cannot be destroyed using Terraform.
Answer: B,C
Explanation:
Removing dependencies prevents resource conflicts during deletion.
terraform destroy is the correct command to cleanly and completely remove all resources created by the Terraform deployment.
NEW QUESTION # 34
Your organization has deployed an active-active high-availability (HA) FortiGate cluster in Google Cloud.
You have noticed a significant increase in asymmetrical traffic flow.
Which two actions can you take to mitigate the issue? (Choose two.)
- A. Enable source NAT for ingress traffic.
- B. Enable destination NAT for ingress traffic.
- C. Enable symmetric hashing on the external load balancer.
- D. Enable the layer 3 unified threat management (UTM) scanning feature if the FortiGate devices are on ForiOS 6.4 or later.
Answer: A,C
Explanation:
Enabling source NAT ensures consistent source IPs, promoting symmetric traffic flow.
Symmetric hashing on the load balancer helps distribute traffic flows evenly and consistently across cluster members, reducing asymmetric routing.
NEW QUESTION # 35
......
Ace Fortinet FCP_GCS_AD-7.6 Certification with Actual Questions Dec 05, 2025 Updated: https://www.testkingpdf.com/FCP_GCS_AD-7.6-testking-pdf-torrent.html
2025 The Most Effective FCP_GCS_AD-7.6 with 37 Questions Answers: https://drive.google.com/open?id=1FaL8xlJg8s0oah8jj0MMxUWulIbwYcD5
