Fortinet NSE6_WCS-7.0 Quiz 1 Topic 1 Questions 1-5

Question: 1

Refer to the exhibit.

q1_NSE6_WCS-7.0

You deployed an active-passive FortiGate HA cluster using a CloudFormation template on an existing VPC. Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the Elastic and secondary IP addresses.

Which statement is correct about the output of the debug?

AThe routing table for Fgt2 updated successfully, and port2 will provide internet access to Fgt2.

BThe Elastic IP is associated with port1 of Fgt2.

CIP address 10.0.0.13 is now associated with eni-0b61d8afc0aefb8a2.

DThe Elastic IP is associated with port2 of Fgt2, and the secondary IP address for port1 and port2 was updated successfully.

Show Answer

Question: 2

An administrator must deploy a web application firewall (WAF) solution to protect the web applications of their organization.

Why would the administrator choose FortiWeb Cloud over AWS WAF with Fortinet managed rules?

AWAF signatures must be manually updated by FortiGuard.

BThe solution must meet PCI 6.6 compliance.

CSSL inspection is a requirement.

DTraffic must be inspected for malware.

Show Answer

Question: 3

An administrator has been asked to deploy an active-passive (A-P) FortiGate cluster in the AWS cloud across two availability zones.

In addition to enhanced redundancy, which other major difference is there compared to deploying A-P high availability in the same availability zone?

AThe FortiGate devices act as a single, logical instance.

BSecondary IP address configuration is used.

CThe number of subnets required is less.

DIP addressing and subnetting are not shared.

Show Answer

Question: 4

Your company deployed a FortiSandbox for AWS.

Which statement is correct about FortiSandbox for AWS?

AFortiSandbox for AWS comes as a hybrid solution. The FortiSandbox manager is installed on-premises and analyzes the results of the sandboxing process received from AWS EC2 instances.

BThe FortiSandbox manager is installed on the AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.

CFortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.

DFortiSandbox deploys new EC2 instances with the custom Windows and Linux VMs, then it sends malware, runs it, and captures the results for analysis.

Show Answer

Question: 5

Which three statements are correct about VPC flow logs? (Choose three.)

AFlow logs do not capture traffic to and from 169.254.169.254 for instance metadata.

BFlow logs do not capture DHCP traffic.

CFlow logs can capture traffic to the reserved IP address for the default VPC router.

DFlow logs can be used as a security tool to monitor the traffic that is reaching the instance.

EFlow logs can capture real-time log streams for the network interfaces.

Show Answer

Fortinet NSE6_WCS-7.0 Quiz:1 Topic:1 Questions:1-5