Question No. 1

Which three statements are correct about Amazon Web Services networking? (Choose three.)

AYou can configure instant IP failover in AWS.

BYou cannot configure gratuitous ARP but you can configure proxy ARP.

CYou cannot deploy FortiGate in transparent mode in AWS.

DYou cannot use custom frames in AWS

EYou can use unicast the FGCP protocol

Show Answer

Correct Answer: C, D, E

Question No. 2

A customer deployed Fortinet Managed Rules for Amazon Web Services (AWS) Web-Application Firewall (WAF) to protect web application servers from attacks.

Which statement about Fortinet Managed Rules for AWS WAF is correct?

AIt offers a negative security model.

BIt can provide Layer 7 DOS protection.

CIt can provide IP Reputation (WAF subscription FortiGuard).

DIt can perform bot and known search engine identification and protection

Show Answer

Correct Answer: D

Question No. 3

A customer deployed an HA Cloud formation to Stage and bootstrap the FortiGate configuration.

Which AWS functions are used by FortiGate HA to call the HA failover?

AAWS Lambda functions

BAWS Mapping functions

CAWS S3 functions

DAWS DynamoDB functions

Show Answer

Correct Answer: A

Question No. 4

Which three statements are correct about AWS security groups? (Choose three)

Aa Security group rules are always permissive: you cannot create rules that deny access.

BBy default, security groups block all outbound traffic.

CWhen associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

DSecurity groups are statetul

EBy default, security groups allow all inbound traffic.

Show Answer

Correct Answer: A, C, D

Question No. 5

Which two statements are correct about AWS Network Access Control Lists (NACLS)? (Choose two.)

ANACLs are stateless: responses to allowed inbound traffic are subject to the rules for outbound traffic.

BAn NACL has separate inbound and outbound rules, and each rule can either allow or deny traffic.

CBy default. each custom NACL allows all inbound and outbound traffic unless you add new rules,

DVPC automatically comes with a modifiable default NACL, and by default it denies all inbound and outbound IPv4 traffic.

Show Answer

Correct Answer: A, B

Free Fortinet NSE6_WCS-6.4 Exam Actual Questions

The questions for NSE6_WCS-6.4 were last updated On Nov 20, 2024