Exam FCP_WCS_AD-7.4 topic 1 question 33 discussion

B. A CNF instance is required for each AWS region that must be protected. CNF instances are tied to specific AWS regions, so to protect multiple regions, an organization must deploy separate CNF instances in each region. C. More than one AWS account can be associated with a CNF instance. AWS allows you to associate multiple accounts with a single CNF instance through features like AWS Organizations, allowing for centralized management of security across multiple accounts. These considerations are important for organizations with global cloud networks spanning multiple regions and accounts.

B, C is correct Regional Deployment: For a global organization with cloud networks in multiple AWS regions, a separate FortiGate Cloud-Native Firewall (CNF) instance is required for each AWS region to provide localized protection and meet compliance requirements. This ensures that each region has its own dedicated NGFW protection tailored to its specific needs (Option B). Multi-Account Association: FortiGate CNF supports associating multiple AWS accounts with a single CNF instance. This feature is beneficial for organizations that operate in a multi-account setup, allowing centralized management and security policies across different accounts (Option C). Other Options Analysis: Option A is incorrect because AWS Firewall Manager is a different service and is not required to provision a CNF instance. Option D is incorrect because a single CNF instance cannot protect multiple AWS regions due to regional isolation in AWS.