Download Fortinet NSE6_WCS-6.4 Mock Test Study Material
NSE6_WCS-6.4 Questions Prepare with Learning Information
Fortinet NSE6_WCS-6.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION 16
Which statement is true about an Elastic Network Interface (ENI)?
- A. Once ENI detaches from one instance. it cannot reattach to another instance.
- B. When youmove an ENI, network traffic is not redirected to the new instance.
- C. You can detach primary ENI from an AWS instance.
- D. An ENI cannot move between AZs.
Answer: D
NEW QUESTION 17
Refer to the exhibit.
You have created an autoscale configuration using a FortiGate HA Cloud
Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate autoscale is configured to synchronize primary and secondary devices. On one of the FortiGate devices, you execute the command shown in the exhibit Which statement is correct about the output of the command?
- A. The device is the secondary in the HA configuration. with the IP address
10.0.0.173. - B. The device is the primary in the HA configuration. with the IP address
10.0.0.173. - C. The device is the secondary in the HA configuration, and the IP address Of the primary device is 10.0.0.173.
- D. The device is the primary in the HA configurationand the IP address of the secondary device is10.0.0.173.
Answer: C
NEW QUESTION 18
Which three statements are correct about Amazon Web Services networking? (Choose three.)
- A. You cannot use custom frames in AWS
- B. You can configure instant IP failover in AWS.
- C. You can use unicast the FGCP protocol
- D. You cannot configure gratuitous ARP but you can configure proxy ARP.
- E. You cannot deploy FortiGate in transparent mode in AWS.
Answer: A,C,E
NEW QUESTION 19
Your company deployed a FortiSandb0X for AWS.
Which statement is correct about FortiSandbox for AWS?
- A. FortiSandbox for AWS comes as hybrid solution. The FortiSandb0X manager is installed on-premises and analyzes the results Of the sandboxing process received from AWS EC2 instances
- B. FortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.
- C. The FortiSandbox manager is installed on AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.
- D. FortiSandbox deploys new EC2 instances with the custom Windows and Linux VMS, then it sends malware, runs it, and captures the results for analysis.
Answer: B
NEW QUESTION 20
HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?
- A. All FortiGate cluster members send health probes using a dedicated interface.
- B. The elastic load balancer handles bi-directional traffic failover using a health probe.
- C. All FortiGate cluster members use unicast FGCP_
- D. The elastic load balancer handles traffic failover using FGCP.
Answer: B
NEW QUESTION 21
Which three statements are correct about AWS security groups? (Choose three)
- A. When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules
- B. Security groups are statetul
- C. By default, security groups block all outbound traffic.
- D. By default,security groups allow all inbound traffic.
- E. a Security group rules are always permissive: you cannot create rules that deny access.
Answer: A,B,E
NEW QUESTION 22
A customer deployed an HA Cloud formation to Stage and bootstrap the FortiGate configuration.
Which AWS functions are used by FortiGate HA to call the HA failover?
- A. AWS Mapping functions
- B. AWS DynamoDB functions
- C. AWS S3 functions
- D. AWS Lambda functions
Answer: D
NEW QUESTION 23
An administrator has deployed an environment in AWS and is now trying to send outbound traffic from the web servers to the internet through FortiGate. The FortiGate policies are configured to allow all outbound traffic. however. the traffic is not reaching the FortiGate internal interface.
Which two statements Can be the reasons for this behavior? (Choose two )
- A. Internet Gateway (IGW) is not configured for VPC.
- B. AWS source destination checks are enabled on the FortiGate internal interfaces.
- C. AWS security groups are blocking the traffic.
- D. FortiGate is not configured as a default gateway tor web servers.
Answer: B,C
NEW QUESTION 24
You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Whichis Ohio US-East-2.
Based on this information, Which statement is correct?
- A. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in the Ohio US-East-2 region.
- B. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in any region.
- C. The Fortinet HA cloud formation template automatically creates an S3 bucket.
- D. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP multicast configuration in the Ohio US-East-2 region.
Answer: C
NEW QUESTION 25
Refer to the exhibit.
A customer is using the AWS Elastic Load Balancer.
Which two statements are correct about the Elastic LoadBalancer configuration? (Choose two.)
- A. The load balancer is configured to load balance traffic between devices in two AZS.
- B. The Amazon resource name is used to access the load balancer node and targets.
- C. The DNS name is used to access devices.
- D. The load balancer is configuredfor the internal traffic oftheVPC
Answer: A,C
NEW QUESTION 26
Which AWS product integrates With FortiGate to automate security remediation for workloads running on the AWS platform?
- A. AWS Inspector
- B. AWS Shield
- C. AWS Protector
- D. AWS GuardDuty
Answer: D
NEW QUESTION 27
You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.
Which license model do you choose?
- A. pay as you go (PAYG).
- B. Bring your own device (BYOD)
- C. Bring your own license (BYOL).
- D. Pay as a bundle (PAYB).
Answer: A
NEW QUESTION 28
......
Most Reliable Fortinet NSE6_WCS-6.4 Training Materials: https://guidetorrent.dumpstorrent.com/NSE6_WCS-6.4-exam-prep.html