Fortinet NSE6_WCS-6.4 Exam Questions Instant Access

Question 1

You are network connectivity issues between two VMS deployed in AWS. One VM is a FortiGate located on subnet *LAN- that is part Of the VPC "Encryption". The Other VM is a Windows server located on the subnet "servers" Which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate.

What is the reason for this?

AYou have not created a VPN to allow traffic between those subnets.

BBy default. AWS does not allow ICMP traffic between subnets.

CThe default AWS Network Access Control List (NACL) does not allow this traffic.

DThe firewall in the Windows VM is blocking the traffic.

Answer : D

Question 2

A customer deployed an HA Cloud formation to Stage and bootstrap the FortiGate configuration.

Which AWS functions are used by FortiGate HA to call the HA failover?

AAWS Lambda functions

BAWS Mapping functions

CAWS S3 functions

DAWS DynamoDB functions

Answer : A

Question 3

Which three statements are correct about Amazon Web Services networking? (Choose three.)

AYou can configure instant IP failover in AWS.

BYou cannot configure gratuitous ARP but you can configure proxy ARP.

CYou cannot deploy FortiGate in transparent mode in AWS.

DYou cannot use custom frames in AWS

EYou can use unicast the FGCP protocol

Answer : C, D, E

Question 4

Which statement is true about an Elastic Network Interface (ENI)?

AOnce ENI detaches from one instance. it cannot reattach to another instance.

BYou can detach primary ENI from an AWS instance.

CAn ENI cannot move between AZs.

DWhen you move an ENI, network traffic is not redirected to the new instance.

Answer : C

Question 5

Refer to the exhibit.

You deployed an active-passive FortiGate HA using a Cloud Formation template on an existing VPC_ Now you want to test active-passive FortiGate HA failover by

running a debug so you can see the API calls to change the elastic and secondary IP addresses.

Which statement is correct about the output of the debug?

AThe routing table for Fgt2 updated successfully. and port2 will provide internet access to Fgt2.

BThe elastic IP is associated with port1 of Fgt2.

CIP address 10. O. O. L 3 is now associated with eni-Ob61d8afcOaefb8a2.

DThe elastic IP is associated with port2 of Fgt2. and the secondary IP address for port1 and port2 was updated successfully.

Answer : C

Question 6

Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer.

Which two statements are correct about the Elastic Load Balancer configuration? (Choose two.)

AThe Amazon resource name is used to access the load balancer node and targets.

BThe DNS name is used to access devices.

CThe load balancer is configured to load balance traffic between devices in two AZS.

DThe load balancer is configured for the internal traffic of the VPC

Answer : B, C

Question 7

Refer to the exhibit.

An administrator configured two auto-scaling polices that they now want to test,

What Will be the impact on payg-auto-scaling-group for the FortiGate devices if the administrator executes a scale-in policy?

AThe scale-in policy will decrease instances from two to one.

BThe scale-in policy will decrease the desired capacity from two to one

CThe scale-in policy will decrease the number of maximum instances from four to three.

Answer : C

Fortinet NSE 6 - Securing AWS With Fortinet Cloud Security 6.4 NSE6_WCS-6.4 Exam Questions