Latest Verified & Correct Fortinet NSE6_WCS-6.4 Questions & Answers Daily Updated [Q11-Q27]

Topic	Details
Topic 1	Explain Fortinet solutions for AWS Deploy Fortinet products in AWS
Topic 2	Configure the load balancer and autoscaling Identify Fortinet products on AWS Marketplace
Topic 3	Configure and secure AWS cloud Fortinet solution for AWS

QUESTION 11
HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?

The elastic load balancer handles traffic failover using FGCP.

The elastic load balancer handles bi-directional traffic failover using a health probe.

All FortiGate cluster members send health probes using a dedicated interface.

All FortiGate cluster members use unicast FGCP_

QUESTION 12
Which AWS product integrates With FortiGate to automate security remediation for workloads running on the AWS platform?

AWS Protector

AWS Inspector

AWS Shield

AWS GuardDuty

QUESTION 13
Which three statements are correct about VPC flow (Choose three.)

Flow logs can capture real-time log streams for the network interfaces.

Flow logs do not capture DHCP traffic.

Flow logs can capture traffic to the reserved IP address for the default VPC router.

Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

Flow logs do not capture traffic to andfrom169.2 54 .169.254 for instance metadata.

QUESTION 14
As part of the security plan you have been tasked with deploying a FortiGate in AWS.
Which two are the security responsibility of the customer in a cloud environment? (Choose two.)

Virtualization platform

Traffic encryption

User management

Storage infrastructure

QUESTION 15
A customer deployed an HA Cloud formation to Stage and bootstrap the FortiGate configuration.
Which AWS functions are used by FortiGate HA to call the HA failover?

AWS Lambda functions

AWS Mapping functions

AWS S3 functions

AWS DynamoDB functions

QUESTION 16
Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?

AWS Protector

AWS GuardDuty

AWS Inspector

AWS Shield

QUESTION 17
Which three statements are correct about AWS security groups? (Choose three)

a Security group rules are always permissive: you cannot create rules that deny access.

By default, security groups block all outbound traffic.

When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

Security groups are statetul

By default,security groups allow all inbound traffic.

QUESTION 18
Refer to the exhibit.

An administrator wants to update the database package from
the Internet to a database server configured with IP address
Which statement is correct about traffic from server IP address
10.0.1.7 to the internet. based on the diagrarm?

Traffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100 2.

Traffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.3

Traffic from server10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.4

Traffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.1

QUESTION 19
Refer to the exhibit.

An administrator configured a FortiGate device to connect to me AWS API to retrieve resource values from the AWS console to create dynamic objects tor the FortiGatepolicies. The administrator is unable to retrieve AWS dynamic objects on FortiGate.
Which three reasons can explain btw? (Choose three.)

AWS was not able to validate credentials provided by the AWS Lab SON connector.

The AWS Lab SON connector failed to connect on port 401.

The AWS Lab SON connector failed to retrieve the instance list.

The AWS API call is not supported on XML version I . O.

The AWS Lab SON connector is configured with an invalid AWS access or secret key

QUESTION 20
Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer.
Which two statements are correct about the Elastic LoadBalancer configuration? (Choose two.)

The Amazon resource name is used to access the load balancer node and targets.

The DNS name is used to access devices.

The load balancer is configured to load balance traffic between devices in two AZS.

The load balancer is configuredfor the internal traffic oftheVPC

QUESTION 21
An administrator has deployed an environment in AWS and is now trying to send outbound traffic from the web servers to the internet through FortiGate. The FortiGate policies are configured to allow all outbound traffic. however. the traffic is not reaching the FortiGate internal interface.
Which two statements Can be the reasons for this behavior? (Choose two )

FortiGate is not configured as a default gateway tor web servers.

Internet Gateway (IGW) is not configured for VPC.

AWS security groups are blocking the traffic.

AWS source destination checks are enabled on the FortiGate internal interfaces.

QUESTION 22
Refer to the exhibit.

An administrator configured two auto-scaling polices that they now want to test, What Will be the impact on payg-auto-scaling-group for the FortiGate devices if the administrator executes a scale-in policy?