Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Fortinet Exam FCP_WCS_AD-7.4 Topic 2 Question 24 Discussion

Actual exam question for Fortinet's FCP_WCS_AD-7.4 exam
Question #: 24
Topic #: 2
[All FCP_WCS_AD-7.4 Questions]

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.

Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

Show Suggested Answer Hide Answer
Suggested Answer: A, B

DNS Configuration:

For FortiWeb Cloud to effectively protect web applications, the DNS records for the application servers must be configured to point to FortiWeb Cloud. This ensures that all incoming traffic is routed through FortiWeb Cloud for inspection and protection (Option A).

Traffic Filtering:

FortiWeb Cloud provides robust protection by filtering incoming traffic to block the OWASP Top 10 attacks, zero-day threats, and other application layer attacks. This ensures the security and integrity of the web applications it protects (Option B).

Other Options Analysis:

Option C is incorrect because FortiWeb Cloud can protect application servers across different VPCs or regions, not just within the same VPC.

Option D is incorrect because step 2 does not require an AWS S3 bucket; it refers to the inspection and filtering of incoming traffic.


FortiWeb Cloud Overview: FortiWeb Cloud

DNS Configuration for Web Applications: DNS Configuration

by Shonda at Mar 24, 2025, 05:17 AM

Limited Time Offer

25%

Off

Get Premium FCP_WCS_AD-7.4 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Edward
27 days ago
You know, with all this talk of active-active and active-passive, it's like FortiGate is playing a game of HA Twister. Just try not to get tied up in knots, folks!
upvoted 0 times
...
Alida
1 months ago
Option D is correct. Active-active clusters can leverage software-defined networking (SDN) to perform failovers automatically.
upvoted 0 times
Alonso
7 days ago
No, A-A clusters do not always require a load balancer. It depends on the specific setup and requirements.
upvoted 0 times
...
Gerardo
13 days ago
That's interesting. So, do A-A clusters always require a load balancer?
upvoted 0 times
...
Chau
23 days ago
Option D is correct. Active-active clusters can leverage software-defined networking (SDN) to perform failovers automatically.
upvoted 0 times
...
...
Bo
1 months ago
Option C is incorrect. Active-active clusters don't always require a load balancer. They can use a distributed load sharing approach.
upvoted 0 times
Glendora
22 days ago
A) For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
upvoted 0 times
...
...
Dana
1 months ago
I agree with Aide. Option B is also true - active-active clusters do rely on API calls for failovers, unlike active-passive which uses a virtual IP.
upvoted 0 times
...
Aide
2 months ago
Option A is correct. SNAT is necessary for active-active clusters to ensure symmetric traffic flow. This is a fundamental requirement.
upvoted 0 times
Tyisha
20 days ago
D) A-A clusters can use a software-defined network (SDN) to perform a failover.
upvoted 0 times
...
Marica
23 days ago
A) For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
upvoted 0 times
...
...
Naomi
2 months ago
But A-A clusters can also use SDN for failover, which is an advantage.
upvoted 0 times
...
Elza
2 months ago
Yes, that's correct. A-A clusters always require a load balancer.
upvoted 0 times
...
Lavonne
2 months ago
I think A-A clusters require a load balancer, right?
upvoted 0 times
...

Save Cancel