Fortinet NSE6_WCS-6.4 Exam Questions Instant Access

Question 1

You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.

Which license model do you choose?

Apay as you go (PAYG).

BBring your own device (BYOD)

CBring your own license (BYOL).

DPay as a bundle (PAYB).

Answer : A

Question 2

Which features are only available on FortiWeb when compared to Fortinet Managed Rules for AWS WAF?

AFortiWeb meets PCI 6.6 compliance.

BFortiWeb can scan web application vulnerabilities.

CFortiWeb provides a WAF subscription (FortiGuard) option.

DFortiWeb provides web application attack signatures.

Answer : B

Question 3

What is the purpose of the created as part Of a FortiGate autoscale deployment using Fortinet cloud formation template in AWS?

ATo store information about varying states of auto scaling conditions.

BTo Store the information used for the scale set.

CTo store the traffic logs Of all FortiGates.

DTo store the firewall policies used by all FortiGates_

Answer : A

Question 4

Refer to the exhibit.

An administrator wants to update the database package from

the Internet to a database server configured with IP address

Which statement is correct about traffic from server IP address

10.0.1.7 to the internet. based on the diagrarm?

ATraffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100 2.

BTraffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.3

CTraffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.4

DTraffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.1

Answer : C

Question 5

A customer needs a recursive DNS for AWS VPC and on-premises networks, The customer also wants to create conditional forwarding rules and DNS endpoints to

resolve custom names in AWS private hosted zones and on-premises DNS servers.

Which Amazon service can be used to achieve this scenario?

AAWS mapping service

BAmazon route 53

CAWS DynamoOB service

DAWS Lambda service

Answer : B

Question 6

Which three statements are correct about VPC flow (Choose three.)

AFlow logs can capture real-time log streams for the network interfaces.

BFlow logs do not capture DHCP traffic.

CFlow logs can capture traffic to the reserved IP address for the default VPC router.

DFlow logs can be used as a security tool to monitor the traffic that is reaching the instance.

EFlow logs do not capture traffic to and from 169.2 54 .169.254 for instance metadata.

Answer : B, D, E

Question 7

You connected to the AWS Management Console at 10:00 AM and verified that there are two FortiGate VMS running, You receive a call from a user reporting about a temporary slow Internet connection that lasted only a few minutes. When you go back to the AWS portal. you notice there are now two additional FortiGate VMS that you did not create. Later that day, the number of VMS returns to two without your intervention. A similar situation occurs several times during the week.

What is the most likely reason for this to happen?

AThe VMS are in an availability group with dynamic membership.

BAutoscaling is configured to act as described in the scenario.

CThe user ran a script to create the extra VMS to get faster connectivity.

DThe AWS portal is not refreshed automatically. and another administrator is creating and removing the VMS as needed.

Answer : B

Fortinet NSE 6 - Securing AWS With Fortinet Cloud Security 6.4 NSE6_WCS-6.4 Exam Questions