Fortinet NSE 6 - Cloud Security 7.0 for AWS - NSE6

QUESTION NO: 1
Refer to the exhibit.

An organization deployed the application servers in the AWS VPC that connects to the corporate data center using Transit Gateway Connect. Demand for the applications has grown and the connection requires more bandwidth.
What is required to achieve higher bandwidth?

A. No configuration change is required because GRE tunnels are scaled to provide higher bandwidth. B. You add a Transit VPC between the organization's VPCs. C. You cannot increase bandwidth the connection has a fixed limit. D. Use routable public IP addresses instead of private IP addresses for connectivity.

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Which three statements are correct about VPC flow logs? (Choose three.)

A. Flow logs can capture real-time log streams for the network interfaces. B. Flow logs can capture traffic to the reserved IP address for the default VPC router. C. Flow logs do not capture DHCP traffic. D. Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata. E. Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

Correct Answer: C,D,E

QUESTION NO: 3
Refer to the exhibit.

Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)

A. GWLB forwards traffic to FortiGate without encapsulation in its dedicated subnet. B. GWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate. C. Inbound traffic is directed to the application subnet through a GWLB endpoint. D. Inbound traffic is directed to the GWLB through a GWLB endpoint.

Correct Answer: B,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
An administrator has been asked to deploy an active-passive (A-P) FortiGate cluster in the AWS cloud across two availability zones.
In addition to enhanced redundancy, which other major difference is there compared to deploying A-P high availability in the same availability zone?

A. The number of subnets required is less. B. The FortiGate devices act as a single, logical instance. C. Secondary IP address configuration is used. D. IP addressing and subnetting are not shared.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

Fortinet NSE 6 - Cloud Security 7.0 for AWS - NSE6_WCS-7.0 Exam Questions