[Jun 01, 2023] Free Fortinet NSE6_WCS-6.4 Exam Questions & Answer [Q19-Q34]

Rate this post

[Jun 01, 2023] Free Fortinet NSE6_WCS-6.4 Exam Questions and Answer

Verified NSE6_WCS-6.4 dumps Q&As Latest NSE6_WCS-6.4 Download

Q19. Refer to the exhibit.

You deployed an active-passive FortiGate HA using a Cloud Formation template on an existing VPC_ Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the elastic and secondary IP addresses.
Which statement is correct about the output of the debug?

The routing table for Fgt2 updated successfully. and port2 will provide internet access to Fgt2.

The elastic IP is associated with port1of Fgt2.

IP address 10. O. O. L 3 is now associated with eni-Ob61d8afcOaefb8a2.

The elastic IP is associated with port2 of Fgt2. and the secondary IP address for port1and port2 was updated successfully.

Q20. Which AWS product integrates With FortiGate to automate security remediation for workloads running on the AWS platform?

AWS Protector

AWS Inspector

AWS Shield

AWS GuardDuty

Q21. Which three Fortinet products are available in Amazon Web Services in both on-demand and bring your own license (BYOL) formats? (Choose three.)

FortiGate

FortiWeb

FortiADC

FortiSlEM

FortiSOAR

Q22. Which three statements are correct about AWS security groups? (Choose three)

a Security group rules are always permissive: you cannot create rules that deny access.

By default, security groups block all outbound traffic.

When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

Security groups are statetul

By default,security groups allow all inbound traffic.

Q23. An administrator has deployed an environment in AWS and is now trying to send outbound traffic from the web servers to the internet through FortiGate. The FortiGate policies are configured to allow all outbound traffic. however. the traffic is not reaching the FortiGate internal interface.
Which two statements Can be the reasons for this behavior? (Choose two )

FortiGate is not configured as a default gateway tor web servers.

Internet Gateway (IGW) is not configured for VPC.

AWS security groups are blocking the traffic.

AWS source destination checks are enabled on the FortiGate internal interfaces.

Q24. An organization has created a VPC and deployed a FortiGate-VM (VM04 /c4.xlarge) in AWS, FortiGate-VM is initially configured With two Elastic Network Interfaces (ENIs). The primary ENI of FortiGate-VM is configured for a public subnet. and the second ENI is configured for a private subnet. In order to provide internet access. they now want to add an EIP to the primary ENI of FortiGate, but the EIP assignment is failing.
Which action would allow the EIP assignment to be successful?

Shut down the FortiGate VM. if it is running. assign the EIP to the primary ENI. and then power it on.

Create and associate a public subnet With the primary ENI Of FortiGate, and then assign the EIP to the primary ENI.

Create and attach a public routing table to the public subnet, associate the public subnet With the primary ENI Of FortiGate. and then assign the EP to the primary ENI.

Create and attach an Internet gateway to the VPC. and then assign the EIP to the primary ENI Of FortiGate.

Q25. Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer.
Which two statements are correct about the Elastic LoadBalancer configuration? (Choose two.)

The Amazon resource name is used to access the load balancer node and targets.

The DNS name is used to access devices.

The load balancer is configured to load balance traffic between devices in two AZS.

The load balancer is configuredfor the internal traffic oftheVPC

Q26. An MSSP deployed 16 FortiGate VMS With the default AWS security groups and network access lists using an on-demand license from Amazon Web Services (AWS) Marketplace. They are using a third-party configuration backup application to back up and track changes for the FortiGate configurations. It can connect to the FortiGatedevices using only the SSH protocol, A customer is using the correct username and password configured on the FortiGate devices. but they are unable to log in using theSSH protocol.
What can be the reason Why this authentication is failing?

The default AWS network access list for FortiGate does not allow SSH.

The AWS key is required to log in to FortiGate using SSH

AWS uses non-standard SSH port1025, and the default AWS security groups and NACL for FortiGate are not configured for the port.

The default AWS Security group for FortiGate does not allow SSH.

Q27. Your company deployed a FortiSandb0X for AWS.
Which statement is correct about FortiSandbox for AWS?

FortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.

The FortiSandbox manager is installed on AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.

FortiSandbox for AWS comes as hybrid solution. The FortiSandb0X manager is installed on-premises and analyzes the results Of the sandboxing process received from AWS EC2 instances

FortiSandbox deploys new EC2 instances with the custom Windows and Linux VMS, then it sends malware, runs it, and captures the results for analysis.

Q28. Which two statements are correct about AWS Network Access Control Lists (NACLS)? (Choose two.)

NACLs are stateless: responses to allowed inbound traffic are subject to the rules for outbound traffic.

An NACL has separate inbound and outbound rules, and each rule can either allow or deny traffic.

By default. each custom NACL allows all inbound and outbound traffic unless you add new rules,

VPC automatically comes with a modifiable default NACL, and by default it denies all inbound and outbound IPv4 traffic.

Q29. You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.
Which license model do you choose?

pay as you go (PAYG).

Bring your own device (BYOD)

Bring your own license (BYOL).

Pay as a bundle (PAYB).

Q30. Refer to the exhibit.

An administrator configured two auto-scaling polices that they now want to test, What Will be the impact on payg-auto-scaling-group for the FortiGate devices if the administrator executes a scale-in policy?