Describe FortiGate Cloud-Native Firewall (CNF) and FortiGate VMs in the Public Cloud NSE4-FORTIOS-ADMINISTRATOR Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   How are FortiGate VMs typically deployed in public cloud marketplaces?

   • AAs a container that must be deployed using Kubernetes
   • BAs a pre-configured image that can be launched directly from the cloud provider's marketplace
   • CAs a physical appliance that is shipped to the cloud provider's data center
   • DAs a managed service that is automatically deployed by the cloud provider
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   For which scenario is FortiGate CNF most appropriate?

   • AA small office that needs a hardware firewall for its on-premises network
   • BA customer that requires a firewall with a custom kernel module
   • CAn organization that wants to deploy microsegmentation policies across many dynamic cloud workloads without managing firewall instances
   • DA deployment that must be fully isolated from the internet
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company is experiencing performance issues with their FortiGate VM in AWS. The VM is deployed in a single Availability Zone (AZ) and is handling all traffic for the VPC. They want to improve availability and performance. What should they do?

   • ADeploy FortiGate VMs in multiple AZs and use an Elastic Load Balancer (ELB) to distribute traffic
   • BUse AWS Global Accelerator to improve performance
   • CIncrease the instance size of the FortiGate VM
   • DMove to FortiGate CNF, which automatically scales
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a key architectural characteristic of FortiGate CNF?

   • AIt requires a physical FortiGate appliance in the customer's data center
   • BIt is deployed as a single monolithic VM that handles all traffic
   • CIt uses a centralized control plane managed by Fortinet with distributed data planes in the customer's cloud environment
   • DIt is managed exclusively through the cloud provider's native console
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company is deploying FortiGate VMs in AWS and wants to ensure that the VMs can automatically scale based on network traffic. They also want to use AWS CloudFormation to deploy the entire infrastructure. Which approach should they take?

   • ADeploy FortiGate VMs in a single instance and rely on AWS Elastic Load Balancing
   • BManually launch FortiGate VMs and configure scaling policies
   • CUse FortiGate CNF, which automatically scales and integrates with CloudFormation
   • DUse an AWS Auto Scaling group with a FortiGate VM launch template and a CloudFormation template
   Reveal Solution Discussion Select an answer first