NSE6_WCS-7.0 試験問題を無料オンラインアクセス

A customer has deployed FortiGate Cloud-Native Firewall (CNF).
Which two statements are correct about policy sets? (Choose two.)

• A.The policy set must be manually synchronized to the CNF instance each time it is modified.
• B.There is an implicit deny rule at the bottom of the policy set.
• C.Multiple policy sets can be applied to a single CNF instance.
• D.A new policy set is created with each deployed CNF instance.

You are troubleshooting network connectivity issues between two VMs deployed in AWS.
One VM is a FortiGate located on subnet "LAN" that is part of the VPC "Encryption". The other VM is a Windows server located on the subnet "servers" which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate.
What are two reasons for this? (Choose two.)

• A.The firewall in the Windows VM is blocking the traffic.
• B.By default, AWS does not allow ICMP traffic between subnets.
• C.The default AWS Network Access Control List (NACL) does not allow this traffic.
• D.Add an inbound allow ICMP rule in the security group attached to the windows server.

Which three statements are correct about VPC flow logs? (Choose three.)

• A.Flow logs do not capture DHCP traffic.
• B.Flow logs can capture real-time log streams for the network interfaces.
• C.Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.
• D.Flow logs can capture traffic to the reserved IP address for the default VPC router.
• E.Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

An AWS administrator is designing internet connectivity for an organization's virtual public cloud (VPC).
The organization has web servers with private addresses that must be reachable from the internet. The web servers must be highly available.
Which two configurations can you use to ensure the web servers are highly available and reachable from the internet? (Choose two.)

• A.Configure a network address translation (NAT) Gateway in your VPC. Place web servers behind the NAT Gateway.
• B.Add a route to the default virtual public cloud (VPC) route table forwarding all traffic to the internet gateway.
• C.Deploy web servers in multiple availability zones.
• D.Deploy a network load balancer.

Refer to the exhibit.

What two conclusions can you draw from the FortiGate debug output? (Choose two.)

• A.The SDN connector is correctly configured and authorized.
• B.The address object AWS Windows Server Lab can be manually changed on FortiGate.
• C.The dynamic address object is automatically updated if the IP changes.
• D.The AWS user account used for software-defined network (SDN) integration must have full administrative rights.