StudyByteLearn
← Fortinet NSE 4 - FortiOS 7.6 Administrator
NSE 4 · Public cloud and FortiGate CNF

Practice question 86 of 440 · hard

FGCP reports a healthy AWS cross-zone takeover, but required cloud route updates fail with permission errors. What should be investigated?

Choose the single best answer.

  1. A.Only the FortiOS production routing configuration while ignoring the reported AWS API denial
  2. B.Only the reserved management interface address
  3. C.The instance role/IAM permissions used by the cloud failover integration
  4. D.Only ordinary physical VMAC/ARP behavior, assumed sufficient across cloud zones
Show the answer and explanation

✓ Correct answer

  • The instance role/IAM permissions used by the cloud failover integration

Cloud failover may need authorized API changes to routes/addresses. FortiOS routes and management addressing do not grant AWS API permissions; ordinary physical Layer 2 takeover assumptions are insufficient for this cross-zone design.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently created and unaffiliated with Fortinet. Questions are original practice items, not recalled exam content. Published-topic coverage does not guarantee examination success. FortiOS baseline is 7.6.0; independently versioned FortiSASE and CNF references are qualified where relevant.