Home / Fortinet / NSE6_WCS-6.4

Fortinet NSE6_WCS-6.4 Practice Test - Questions Answers, Page 2

Question list

List of questions

Question 11

(0)

A customer needs a recursive DNS for AWS VPC and on-premises networks, The customer also wants to create conditional forwarding rules and DNS endpoints to resolve custom names in AWS private hosted

Question 12

(0)

Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?

Question 13

(0)

As part of the security plan you have been tasked with deploying a FortiGate in AWS. Which two are the security responsibility of the customer in a cloud environment? (Choose two.)

Question 14

(0)

Refer to the exhibit. An administrator configured a FortiGate device to connect to me AWS API to retrieve resource values from the AWS console to create dynamic objects tor the FortiGate policies

Question 15

(0)

Which statement is true about an Elastic Network Interface (ENI)?

Question 16

(0)

Which two statements are correct about AWS Network Access Control Lists (NACLS)? (Choose two.)

Question 17

(0)

Which features are only available on FortiWeb when compared to Fortinet Managed Rules for AWS WAF?

Question 18

(0)

Which three Fortinet products are available in Amazon Web Services in both on-demand and bring your own license (BYOL) formats? (Choose three.)

Question 19

(0)

Refer to the exhibit. An administrator wants to update the database package from the Internet to a database server configured with IP address Which statement is correct about traffic from server

Question 20

(0)

An MSSP deployed 16 FortiGate VMS With the default AWS security groups and network access lists using an on-demand license from Amazon Web Services (AWS) Marketplace. They are using a thirdparty con

Related questions

Refer to the exhibit. An administrator configured a FortiGate device to connect to me AWS API to retrieve resource values from the AWS console to create dynamic objects tor the FortiGate policies. The administrator is unable to retrieve AWS dynamic objects on FortiGate. Which three reasons can explain btw? (Choose three.)

You are network connectivity issues between two VMS deployed in AWS. One VM is a FortiGate located on subnet •LAN- that is part Of the VPC "Encryption". The Other VM is a Windows server located on the subnet "servers" Which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate. What is the reason for this?

Refer to the exhibit. You deployed an active-passive FortiGate HA using a Cloud Formation template on an existing VPC_ Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the elastic and secondary IP addresses. Which statement is correct about the output of the debug?

You connected to the AWS Management Console at 10:00 AM and verified that there are two FortiGate VMS running, You receive a call from a user reporting about a temporary slow Internet connection that lasted only a few minutes. When you go back to the AWS portal. you notice there are now two additional FortiGate VMS that you did not create. Later that day, the number of VMS returns to two without your intervention. A similar situation occurs several times during the week. What is the most likely reason for this to happen?

An MSSP deployed 16 FortiGate VMS With the default AWS security groups and network access lists using an on-demand license from Amazon Web Services (AWS) Marketplace. They are using a thirdparty configuration backup application to back up and track changes for the FortiGate configurations. It can connect to the FortiGate devices using only the SSH protocol, A customer is using the correct username and password configured on the FortiGate devices. but they are unable to log in using the SSH protocol. What can be the reason Why this authentication is failing?

Your company deployed a FortiSandb0X for AWS. Which statement is correct about FortiSandbox for AWS?

Refer to the exhibit. You have created an autoscale configuration using a FortiGate HA Cloud Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate autoscale is configured to synchronize primary and secondary devices. On one of the FortiGate devices, you execute the command shown in the exhibit Which statement is correct about the output of the command?

You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Which is Ohio US-East-2. Based on this information, Which statement is correct?

Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?

An administrator has deployed an environment in AWS and is now trying to send outbound traffic from the web servers to the internet through FortiGate. The FortiGate policies are configured to allow all outbound traffic. however. the traffic is not reaching the FortiGate internal interface. Which two statements Can be the reasons for this behavior? (Choose two )

Question 11

A customer needs a recursive DNS for AWS VPC and on-premises networks, The customer also wants to create conditional forwarding rules and DNS endpoints to resolve custom names in AWS private hosted zones and on-premises

DNS servers.

Which Amazon service can be used to achieve this scenario?

AWS mapping service

Amazon route 53

AWS DynamoOB service

AWS Lambda service

Show Answer Comment (0)

Question 12

Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?

AWS Protector

AWS GuardDuty

AWS Inspector

AWS Shield

Show Answer Comment (0)

Question 13

As part of the security plan you have been tasked with deploying a FortiGate in AWS.

Which two are the security responsibility of the customer in a cloud environment? (Choose two.)

Virtualization platform

Traffic encryption

User management

Storage infrastructure

Show Answer Comment (0)

Question 14

Refer to the exhibit.

An administrator configured a FortiGate device to connect to me AWS API to retrieve resource values from the AWS console to create dynamic objects tor the FortiGate policies. The administrator is unable to retrieve AWS dynamic objects on FortiGate.

Which three reasons can explain btw? (Choose three.)

AWS was not able to validate credentials provided by the AWS Lab SON connector.

The AWS Lab SON connector failed to connect on port 401.

The AWS Lab SON connector failed to retrieve the instance list.

The AWS API call is not supported on XML version I . O.

The AWS Lab SON connector is configured with an invalid AWS access or secret key

Show Answer Comment (0)

Question 15

Which statement is true about an Elastic Network Interface (ENI)?

Once ENI detaches from one instance. it cannot reattach to another instance.

You can detach primary ENI from an AWS instance.

An ENI cannot move between AZs.

When you move an ENI, network traffic is not redirected to the new instance.

Show Answer Comment (0)

Question 16

Which two statements are correct about AWS Network Access Control Lists (NACLS)? (Choose two.)

NACLs are stateless: responses to allowed inbound traffic are subject to the rules for outbound traffic.

An NACL has separate inbound and outbound rules, and each rule can either allow or deny traffic.

By default. each custom NACL allows all inbound and outbound traffic unless you add new rules,

VPC automatically comes with a modifiable default NACL, and by default it denies all inbound and outbound IPv4 traffic.

Show Answer Comment (0)

Question 17

Which features are only available on FortiWeb when compared to Fortinet Managed Rules for AWS WAF?

FortiWeb meets PCI 6.6 compliance.

FortiWeb can scan web application vulnerabilities.

FortiWeb provides a WAF subscription (FortiGuard) option.

FortiWeb provides web application attack signatures.

Show Answer Comment (0)

Question 18

Which three Fortinet products are available in Amazon Web Services in both on-demand and bring your own license (BYOL) formats? (Choose three.)

FortiGate

FortiWeb

FortiADC

FortiSlEM

FortiSOAR

Show Answer Comment (0)

Question 19

Refer to the exhibit.

An administrator wants to update the database package from the Internet to a database server configured with IP address Which statement is correct about traffic from server IP address 10.0.1.7 to the internet. based on the diagrarm?

Traffic from server 10.0.1.7 to the internet will hide behind elastic IP 198.51.100 2.

Traffic from server 10.0.1.7 to the internet will hide behind elastic IP 198.51.100.3

Traffic from server 10.0.1.7 to the internet will hide behind elastic IP 198.51.100.4

Traffic from server 10.0.1.7 to the internet will hide behind elastic IP 198.51.100.1

Show Answer Comment (0)

Question 20

It can connect to the FortiGate devices using only the SSH protocol, A customer is using the correct username and password configured on the FortiGate devices. but they are unable to log in using the SSH protocol.

What can be the reason Why this authentication is failing?

The default AWS network access list for FortiGate does not allow SSH.

The AWS key is required to log in to FortiGate using SSH

AWS uses non-standard SSH port 1025, and the default AWS security groups and NACL for FortiGate are not configured for the port.

The default AWS Security group for FortiGate does not allow SSH.

Show Answer Comment (0)

Total 30 questions

1 2 3

Go to page: of 3