Download NSE6_WCS-7.0 Exam Dumps Questions to get 100% Success in Fortinet [Q14-Q34]

QUESTION 14
Which three Fortinet products are available in Amazon Web Services in both on-demand and bring your own license (BYOL) formats? (Choose three.)

FortiGate

FortiWeb

FortiADC

FortiSlEM

FortiSOAR

QUESTION 15
Refer to the exhibit.

Which statement is correct about the VPC peering connections shown in the exhibit?

You can associate VPC ID pcx-23232323 with VPC B to form a VPC peering connection between VPC B and VPC C.

You cannot route packets directly from VPC B to VPC C through VPC A.

TO route packets directly from VPC B to VPC C through VPC A, you must add a route for network 192.168.0.0/16 in the VPC A routing table.

You cannot create a VPC peering connection between VPC B and VPC C to route packets directly.

QUESTION 16
You are network connectivity issues between two VMS deployed in AWS. One VM is a FortiGate located on subnet *LAN- that is part Of the VPC “Encryption”. The Other VM is a Windows server located on the subnet “servers” Which is also in the “Encryption” VPC. You are unable to ping the Windows server from FortiGate.
What is the reason for this?

You have not created a VPN to allow traffic between those subnets.

By default. AWS does not allow ICMP traffic between subnets.

The default AWS Network Access Control List (NACL) does not allow this traffic.

The firewall in the Windows VM is blocking the traffic.

QUESTION 17
Which statement is true about an Elastic Network Interface (ENI)?

Once ENI detaches from one instance. it cannot reattach to another instance.

You can detach primary ENI from an AWS instance.

An ENI cannot move between AZs.

When youmove an ENI, network traffic is not redirected to the new instance.

QUESTION 18
Which three statements are correct about AWS security groups? (Choose three)

a Security group rules are always permissive: you cannot create rules that deny access.

By default, security groups block all outbound traffic.

When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

Security groups are statetul

By default,security groups allow all inbound traffic.

QUESTION 19
Your company deployed a FortiSandb0X for AWS.
Which statement is correct about FortiSandbox for AWS?

FortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.

The FortiSandbox manager is installed on AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.

FortiSandbox for AWS comes as hybrid solution. The FortiSandb0X manager is installed on-premises and analyzes the results Of the sandboxing process received from AWS EC2 instances

FortiSandbox deploys new EC2 instances with the custom Windows and Linux VMS, then it sends malware, runs it, and captures the results for analysis.

QUESTION 20
Refer to the exhibit.

You have created an autoscale configuration using a FortiGate HA Cloud Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate autoscale is configured to synchronize primary and secondary devices. On one of the FortiGate devices, you execute the command shown in the exhibit.
Which statement is correct about the output of the command?

The device is the primary in the HA configuration. with the IP address 10.0.0.173.

The device is the secondary in the HA configuration, and the IP address Of the primary device is
10.0.0.173.

The device is the primary in the HA configuration and the IP address of the secondary device is10.0.0.173.

The device is the secondary in the HA configuration. with the IP address 10.0.0.173.

QUESTION 21
You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Which is Ohio US-East-2.
Based on this information, which statement is correct?

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in the Ohio US-East-2 region.

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP multicast configuration in the Ohio US-East-2 region.

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in any region.

The Fortinet HA cloud formation template automatically creates an S3 bucket.

QUESTION 22
Which three statements are correct about Amazon Web Services networking? (Choose three.)

You can configure instant IP failover in AWS.

You cannot configure gratuitous ARP but you can configure proxy ARP.

You cannot deploy FortiGate in transparent mode in AWS.

You cannot use custom frames in AWS

You can use unicast the FGCP protocol

QUESTION 23
As part of the security plan you have been tasked with deploying a FortiGate in AWS.
Which two are the security responsibility of the customer in a cloud environment? (Choose two.)

Virtualization platform

Traffic encryption

User management

Storage infrastructure

QUESTION 24
Which features are only available on FortiWeb when compared to Fortinet Managed Rules for AWS WAF?

FortiWeb meets PCI 6.6 compliance.

FortiWeb can scan web application vulnerabilities.

FortiWeb provides a WAF subscription (FortiGuard) option.

FortiWeb provides web application attack signatures.

QUESTION 25
A customer deployed Fortinet Managed Rules for Amazon Web Services (AWS) Web-Application Firewall (WAF) to protect web application servers from attacks.
Which statement about Fortinet Managed Rules for AWS WAF is correct?

It offers a negative security model.

It can provide Layer 7 DOS protection.

It can provide IP Reputation (WAF subscription FortiGuard).

It can perform bot and known search engine identification and protection