NSE6_WCS-7.0 試験問題を無料オンラインアクセス

Refer to the exhibit.

An organization deployed the application servers in the AWS VPC that connects to the corporate data center using Transit Gateway Connect. Demand for the applications has grown and the connection requires more bandwidth.
What is required to achieve higher bandwidth?

• A.Use routable public IP addresses instead of private IP addresses for connectivity.
• B.You cannot increase bandwidth the connection has a fixed limit.
• C.You add a Transit VPC between the organization's VPCs.
• D.No configuration change is required because GRE tunnels are scaled to provide higher bandwidth.

An administrator has been asked to deploy an active-passive (A-P) FortiGate cluster in the AWS cloud across two availability zones.
In addition to enhanced redundancy, which other major difference is there compared to deploying A-P high availability in the same availability zone?

• A.Secondary IP address configuration is used.
• B.The FortiGate devices act as a single, logical instance.
• C.IP addressing and subnetting are not shared.
• D.The number of subnets required is less.

Which three statements are correct about VPC flow logs? (Choose three.)

• A.Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.
• B.Flow logs can capture traffic to the reserved IP address for the default VPC router.
• C.Flow logs do not capture DHCP traffic.
• D.Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.
• E.Flow logs can capture real-time log streams for the network interfaces.

Which two statements about the FortiCloud portal are true? (Choose two.)

• A.You can access only cloud services that you have subscribed to on AWS marketplace.
• B.To assign permissions in the identity and access management (JAM) portal, you must write a JSON script.
• C.You can gain remote access to your FortiGate VM directly from the portal.
• D.You can access the FortiFlex portal only after you purchase a FortiFlex license and register it on FortiCare.

A global organization with cloud networks deployed in several AWS regions wants to set up next-generation firewall (NGFW) protection using FortiGate Cloud-Native Firewall (CNF).
What are two deployment considerations for the organization? (Choose two.)

• A.They must choose AWS Firewall Manager to provision a CNF instance.
• B.A CNF instance is required for each AWS region that must be protected.
• C.Only one CNF instance is required to protect all AWS regions.
• D.More than one AWS account can be associated with a CNF instance.