Exam FCP_WCS_AD-7.4 topic 1 question 18 discussion

Actual exam question from Fortinet's FCP_WCS_AD-7.4

Question #: 18
Topic #: 1

Refer to the exhibit.

An administrator configured a FortiGate device to connect to the AWS API to retrieve resource values from the AWS console to create dynamic objects for the FortiGate policies. The administrator is unable to retrieve AWS dynamic objects on FortiGate.
Which two reasons can explain why? (Choose two.)

A. The AWS API call is not supported on XML version 1.0.
B. AWS was not able to validate credentials provided by the AWS Lab SDN connector because of a clock skew between FortiGate and AWS.
C. The AWS Lab SDN connector is configured with an invalid AWS access or secret key.
D. The AWS Lab SDN connector failed to connect on port 401.
E. The AWS Lab SDN did not find any instances in the configured VPC.

Show Suggested Answer

Suggested Answer: BC 🗳️

by the_giant at July 29, 2024, 7:31 p.m.

Comments

Submit Cancel

myrmidon3

6 months, 2 weeks ago

Selected Answer: BC

B. AWS was not able to validate credentials provided by the AWS Lab SDN connector because of a clock skew between FortiGate and AWS. The 401 error code with the message "AWS was not able to validate the provided access credentials" could be related to time synchronization issues (clock skew), which is a common issue when using API calls with AWS. C. The AWS Lab SDN connector is configured with an invalid AWS access or secret key. The error message explicitly mentions "aws access/secret key invalid," which directly points to invalid credentials being used by the AWS Lab SDN connector. Both of these reasons align with the error messages observed in the debug output.

upvoted 3 times

...

the_giant

9 months, 1 week ago

Selected Answer: BC

B,C is correct

upvoted 1 times

...

Exam FCP_WCS_AD-7.4 All Questions

View all questions & answers for the FCP_WCS_AD-7.4 exam

Exam FCP_WCS_AD-7.4 topic 1 question 18 discussion

Comments

myrmidon3

the_giant

SY0-701