Home / Fortinet / NSE6_WCS-6.4

Fortinet NSE6_WCS-6.4 Practice Test - Questions Answers, Page 3

Question list

List of questions

Question 21

(0)

Refer to the exhibit. A customer is using the AWS Elastic Load Balancer. Which two statements are correct about the Elastic Load Balancer configuration? (Choose two.)

Question 22

(0)

Refer to the exhibit. You deployed an active-passive FortiGate HA using a Cloud Formation template on an existing VPC_ Now you want to test active-passive FortiGate HA failover by running a debug

Question 23

(0)

You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle. Which license model do you choose?

Question 24

(0)

You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Which is Ohio US-East-2. Based on this informat

Question 25

(0)

You connected to the AWS Management Console at 10:00 AM and verified that there are two FortiGate VMS running, You receive a call from a user reporting about a temporary slow Internet connection tha

Question 26

(0)

Which three statements are correct about Amazon Web Services networking? (Choose three.)

Question 27

(0)

Which three statements are correct about VPC flow (Choose three.)

Question 28

(0)

Refer to the exhibit. You have created an autoscale configuration using a FortiGate HA Cloud Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate

Question 29

(0)

A customer deployed Fortinet Managed Rules for Amazon Web Services (AWS) Web-Application Firewall (WAF) to protect web application servers from attacks. Which statement about Fortinet Managed Rules

Question 30

(0)

Which three statements are correct about AWS security groups? (Choose three)

Related questions

Refer to the exhibit. You deployed an active-passive FortiGate HA using a Cloud Formation template on an existing VPC_ Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the elastic and secondary IP addresses. Which statement is correct about the output of the debug?

Refer to the exhibit. An administrator configured a FortiGate device to connect to me AWS API to retrieve resource values from the AWS console to create dynamic objects tor the FortiGate policies. The administrator is unable to retrieve AWS dynamic objects on FortiGate. Which three reasons can explain btw? (Choose three.)

You are network connectivity issues between two VMS deployed in AWS. One VM is a FortiGate located on subnet •LAN- that is part Of the VPC "Encryption". The Other VM is a Windows server located on the subnet "servers" Which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate. What is the reason for this?

You connected to the AWS Management Console at 10:00 AM and verified that there are two FortiGate VMS running, You receive a call from a user reporting about a temporary slow Internet connection that lasted only a few minutes. When you go back to the AWS portal. you notice there are now two additional FortiGate VMS that you did not create. Later that day, the number of VMS returns to two without your intervention. A similar situation occurs several times during the week. What is the most likely reason for this to happen?

An MSSP deployed 16 FortiGate VMS With the default AWS security groups and network access lists using an on-demand license from Amazon Web Services (AWS) Marketplace. They are using a thirdparty configuration backup application to back up and track changes for the FortiGate configurations. It can connect to the FortiGate devices using only the SSH protocol, A customer is using the correct username and password configured on the FortiGate devices. but they are unable to log in using the SSH protocol. What can be the reason Why this authentication is failing?

Refer to the exhibit. You have created an autoscale configuration using a FortiGate HA Cloud Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate autoscale is configured to synchronize primary and secondary devices. On one of the FortiGate devices, you execute the command shown in the exhibit Which statement is correct about the output of the command?

You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Which is Ohio US-East-2. Based on this information, Which statement is correct?

Your company deployed a FortiSandb0X for AWS. Which statement is correct about FortiSandbox for AWS?

An administrator has deployed an environment in AWS and is now trying to send outbound traffic from the web servers to the internet through FortiGate. The FortiGate policies are configured to allow all outbound traffic. however. the traffic is not reaching the FortiGate internal interface. Which two statements Can be the reasons for this behavior? (Choose two )

Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?

Question 21

Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer.

Which two statements are correct about the Elastic Load Balancer configuration? (Choose two.)

The Amazon resource name is used to access the load balancer node and targets.

The DNS name is used to access devices.

The load balancer is configured to load balance traffic between devices in two AZS.

The load balancer is configured for the internal traffic of the VPC

Show Answer Comment (0)

You deployed an active-passive FortiGate HA using a Cloud Formation template on an existing VPC_ Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the elastic and secondary IP addresses.

Which statement is correct about the output of the debug?

The routing table for Fgt2 updated successfully. and port2 will provide internet access to Fgt2.

The elastic IP is associated with port1 of Fgt2.

IP address 10. O. O. L 3 is now associated with eni-Ob61d8afcOaefb8a2.

The elastic IP is associated with port2 of Fgt2. and the secondary IP address for port1 and port2 was updated successfully.

Show Answer Comment (0)

Question 23

You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.

Which license model do you choose?

pay as you go (PAYG).

Bring your own device (BYOD)

Bring your own license (BYOL).

Pay as a bundle (PAYB).

Show Answer Comment (0)

Question 24

You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Which is Ohio US-East-2.

Based on this information, Which statement is correct?

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in the Ohio US-East-2 region.

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP multicast configuration in the Ohio US-East-2 region.

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in any region.

The Fortinet HA cloud formation template automatically creates an S3 bucket.

Show Answer Comment (0)

Question 25

When you go back to the AWS portal. you notice there are now two additional FortiGate VMS that you did not create. Later that day, the number of VMS returns to two without your intervention. A similar situation occurs several times during the week.

What is the most likely reason for this to happen?

The VMS are in an availability group with dynamic membership.

Autoscaling is configured to act as described in the scenario.

The user ran a script to create the extra VMS to get faster connectivity.

The AWS portal is not refreshed automatically. and another administrator is creating and removing the VMS as needed.

Show Answer Comment (0)

Question 26

Which three statements are correct about Amazon Web Services networking? (Choose three.)

You can configure instant IP failover in AWS.

You cannot configure gratuitous ARP but you can configure proxy ARP.

You cannot deploy FortiGate in transparent mode in AWS.

You cannot use custom frames in AWS

You can use unicast the FGCP protocol

Show Answer Comment (0)

Question 27

Which three statements are correct about VPC flow (Choose three.)

Flow logs can capture real-time log streams for the network interfaces.

Flow logs do not capture DHCP traffic.

Flow logs can capture traffic to the reserved IP address for the default VPC router.

Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

Flow logs do not capture traffic to and from 169.2 54 .169.254 for instance metadata.

Show Answer Comment (0)

Question 28

Refer to the exhibit.

You have created an autoscale configuration using a FortiGate HA Cloud Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate autoscale is configured to synchronize primary and secondary devices. On one of the FortiGate devices, you execute the command shown in the exhibit Which statement is correct about the output of the command?

The device is the primary in the HA configuration. with the IP address 10.0.0.173.

The device is the secondary in the HA configuration, and the IP address Of the primary device is 10.0.0.173.

The device is the primary in the HA configuration and the IP address of the secondary device is 10.0.0.173.

The device is the secondary in the HA configuration. with the IP address 10.0.0.173.

Show Answer Comment (0)

Question 29

A customer deployed Fortinet Managed Rules for Amazon Web Services (AWS) Web-Application Firewall (WAF) to protect web application servers from attacks.

Which statement about Fortinet Managed Rules for AWS WAF is correct?

It offers a negative security model.

It can provide Layer 7 DOS protection.

It can provide IP Reputation (WAF subscription FortiGuard).

It can perform bot and known search engine identification and protection

Show Answer Comment (0)