Fortinet NSE6_WCS-6.4 Exam Practice Test Instant Access

Question 1

HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?

AThe elastic load balancer handles traffic failover using FGCP.

BThe elastic load balancer handles bi-directional traffic failover using a health probe.

CAll FortiGate cluster members send health probes using a dedicated interface.

DAll FortiGate cluster members use unicast FGCP_

Answer : B

Question 2

Which features are only available on FortiWeb when compared to Fortinet Managed Rules for AWS WAF?

AFortiWeb meets PCI 6.6 compliance.

BFortiWeb can scan web application vulnerabilities.

CFortiWeb provides a WAF subscription (FortiGuard) option.

DFortiWeb provides web application attack signatures.

Answer : B

Question 3

An administrator has deployed an environment in AWS and is now trying to send outbound traffic from the web servers to the internet through FortiGate. The FortiGate policies are configured to allow all outbound traffic. however. the traffic is not reaching the FortiGate internal interface.

Which two statements Can be the reasons for this behavior? (Choose two )

AFortiGate is not configured as a default gateway tor web servers.

BInternet Gateway (IGW) is not configured for VPC.

CAWS security groups are blocking the traffic.

DAWS source destination checks are enabled on the FortiGate internal interfaces.

Answer : C, D

Question 4

Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer.

Which two statements are correct about the Elastic Load Balancer configuration? (Choose two.)

AThe Amazon resource name is used to access the load balancer node and targets.

BThe DNS name is used to access devices.

CThe load balancer is configured to load balance traffic between devices in two AZS.

DThe load balancer is configured for the internal traffic of the VPC

Answer : B, C

Question 5

Which three statements are correct about AWS security groups? (Choose three)

Aa Security group rules are always permissive: you cannot create rules that deny access.

BBy default, security groups block all outbound traffic.

CWhen associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

DSecurity groups are statetul

EBy default, security groups allow all inbound traffic.

Answer : A, C, D

Question 6

Refer to the exhibit.

An administrator wants to update the database package from

the Internet to a database server configured with IP address

Which statement is correct about traffic from server IP address

10.0.1.7 to the internet. based on the diagrarm?

ATraffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100 2.

BTraffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.3

CTraffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.4

DTraffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.1

Answer : C

Question 7

Which three Fortinet products are available in Amazon Web Services in both on-demand and bring your own license (BYOL) formats? (Choose three.)

AFortiGate

BFortiWeb

CFortiADC

DFortiSlEM

EFortiSOAR

Answer : A, B, C

Fortinet NSE 6 - Securing AWS With Fortinet Cloud Security 6.4 NSE6_WCS-6.4 Exam Practice Test