A global organization with cloud networks deployed in several AWS regions wants to set up next- generation firewall (NGFW) protection using FortiGate…

Regional Deployment:

For a global organization with cloud networks in multiple AWS regions, a separate FortiGate Cloud-

Native Firewall (CNF) instance is required for each AWS region to provide localized protection and

meet compliance requirements. This ensures that each region has its own dedicated NGFW

protection tailored to its specific needs (Option B).

Multi-Account Association:

FortiGate CNF supports associating multiple AWS accounts with a single CNF instance. This feature is

beneficial for organizations that operate in a multi-account setup, allowing centralized management

and security policies across different accounts (Option C).

Other Options Analysis:

Option A is incorrect because AWS Firewall Manager is a different service and is not required to

provision a CNF instance.

Option D is incorrect because a single CNF instance cannot protect multiple AWS regions due to

regional isolation in AWS.

Reference:

FortiGate CNF Documentation: FortiGate CNF

AWS Multi-Account Best Practices: AWS Multi-Account