Fortinet NSE6_WCS-6.4 Exam Practice Test Instant Access

Question 1

Which three statements are correct about AWS security groups? (Choose three)

Aa Security group rules are always permissive: you cannot create rules that deny access.

BBy default, security groups block all outbound traffic.

CWhen associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

DSecurity groups are statetul

EBy default, security groups allow all inbound traffic.

Answer : A, C, D

Question 2

A customer deployed Fortinet Managed Rules for Amazon Web Services (AWS) Web-Application Firewall (WAF) to protect web application servers from attacks.

Which statement about Fortinet Managed Rules for AWS WAF is correct?

AIt offers a negative security model.

BIt can provide Layer 7 DOS protection.

CIt can provide IP Reputation (WAF subscription FortiGuard).

DIt can perform bot and known search engine identification and protection

Answer : D

Question 3

Refer to the exhibit.

You have created an autoscale configuration using a FortiGate HA Cloud

Formation template. You want to examine the autoscale FortiOS configuration to

confirm that FortiGate autoscale is configured to synchronize primary and

secondary devices. On one of the FortiGate devices, you execute the command

shown in the exhibit

Which statement is correct about the output of the command?

AThe device is the primary in the HA configuration. with the IP address
10.0.0.173.

BThe device is the secondary in the HA configuration, and the IP address Of
the primary device is 10.0.0.173.

CThe device is the primary in the HA configuration and the IP address of the
secondary device is 10.0.0.173.

DThe device is the secondary in the HA configuration. with the IP address
10.0.0.173.

Answer : B

Question 4

Which three statements are correct about VPC flow (Choose three.)

AFlow logs can capture real-time log streams for the network interfaces.

BFlow logs do not capture DHCP traffic.

CFlow logs can capture traffic to the reserved IP address for the default VPC router.

DFlow logs can be used as a security tool to monitor the traffic that is reaching the instance.

EFlow logs do not capture traffic to and from 169.2 54 .169.254 for instance metadata.

Answer : B, D, E

Question 5

Which three statements are correct about Amazon Web Services networking? (Choose three.)

AYou can configure instant IP failover in AWS.

BYou cannot configure gratuitous ARP but you can configure proxy ARP.

CYou cannot deploy FortiGate in transparent mode in AWS.

DYou cannot use custom frames in AWS

EYou can use unicast the FGCP protocol

Answer : C, D, E

Question 6

You connected to the AWS Management Console at 10:00 AM and verified that there are two FortiGate VMS running, You receive a call from a user reporting about a temporary slow Internet connection that lasted only a few minutes. When you go back to the AWS portal. you notice there are now two additional FortiGate VMS that you did not create. Later that day, the number of VMS returns to two without your intervention. A similar situation occurs several times during the week.

What is the most likely reason for this to happen?

AThe VMS are in an availability group with dynamic membership.

BAutoscaling is configured to act as described in the scenario.

CThe user ran a script to create the extra VMS to get faster connectivity.

DThe AWS portal is not refreshed automatically. and another administrator is creating and removing the VMS as needed.

Answer : B

Question 7

You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Which is Ohio US-East-2.

Based on this information, Which statement is correct?

AYou must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in the Ohio US-East-2 region.

BYou must create an S3 bucket to stage and bootstrap FortiGate with an FGCP multicast configuration in the Ohio US-East-2 region.

CYou must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in any region.

DThe Fortinet HA cloud formation template automatically creates an S3 bucket.

Answer : D

Fortinet NSE6_WCS-6.4 Fortinet NSE 6 - Securing AWS With Fortinet Cloud Security 6.4 Exam Practice Test