NSE6_WCS-7.0 試験問題を無料オンラインアクセス

Refer to the exhibit.

Which two statements are correct about traffic flow in FortiWeb Cloud? (Choose two.)

• A.The DNS name for the application servers must point to FortiWeb Cloud.
• B.FortiWeb Cloud can protect the application servers only if they are all located in the same virtual public cloud (VPC).
• C.Step 2 requires an AWS S3 bucket to be created.
• D.FortiWeb Cloud filters the incoming traffic from users, blocking the OWASP Top 10 attacks, zero-day threats, and other application layer attacks.

Refer to the exhibit.

What two conclusions can you draw from the FortiGate debug output? (Choose two.)

• A.The dynamic address object is automatically updated if the IP changes.
• B.The SDN connector is correctly configured and authorized.
• C.The AWS user account used for software-defined network (SDN) integration must have full administrative rights.
• D.The address object AWS Windows Server Lab can be manually changed on FortiGate.

Refer to the exhibit.

You deployed an active-passive FortiGate HA cluster using a CloudFormation template on an existing VPC.
Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the Elastic and secondary IP addresses.
Which statement is correct about the output of the debug?

• A.IP address 10.0.0.13 is now associated with eni-0b61d8afc0aefb8a2.
• B.The Elastic IP is associated with port1 of Fgt2.
• C.The Elastic IP is associated with port2 of Fgt2, and the secondary IP address for port1 and port2 was updated successfully.
• D.The routing table for Fgt2 updated successfully, and port2 will provide internet access to Fgt2.

Refer to the exhibit.

What occurs during a failover for an active-passive (A-P) cluster that is deployed in two different availability zones? (Choose two.)

• A.The secondary IP address of Port2 of FGT-1 is moved to Port2 of FGT-2.
• B.An additional route is added to the route table of the HA Sync AZ2 subnet to forward all traffic to the Internet GW.
• C.The cluster elastic IP address (EIP) is moved from Port1 of FGT-1 to Port1 of FGT-2.
• D.The default static route in the Private-AZ1 subnet route table is modified to forward all traffic to Port2 of FGT2.

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.
The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.
Which action would allow the EIP assignment to be successful?

• A.Create and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• B.Create and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• C.Create and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.
• D.Shut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.