[2023年最新] 高合格率なNSE6_WCS-6.4テストアンサーかつFortinet NSE6_WCS-6.4テストPDF
完璧NSE6_WCS-6.4問題集試験問題と解答でパス保証されます
Fortinet NSE6_WCS-6.4 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
質問 16
Which features are only available on FortiWeb when compared to Fortinet Managed Rules for AWS WAF?
- A. FortiWeb provides web application attack signatures.
- B. FortiWeb meets PCI 6.6 compliance.
- C. FortiWeb can scan web application vulnerabilities.
- D. FortiWeb provides a WAF subscription (FortiGuard) option.
正解: C
質問 17
Refer to the exhibit.
An administrator configured two auto-scaling polices that they now want to test, What Will be the impact on payg-auto-scaling-group for the FortiGate devices if the administrator executes a scale-in policy?
- A. The scale-in policy will decrease instances from two to one.
- B. The scale-in policy will decrease the number of maximum instances from four to three.
- C. The scale-in policy will decrease the desired capacity from two to one
正解: B
質問 18
HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?
- A. All FortiGate cluster members use unicast FGCP_
- B. The elastic load balancer handles traffic failover using FGCP.
- C. All FortiGate cluster members send health probes using a dedicated interface.
- D. The elastic load balancer handles bi-directional traffic failover using a health probe.
正解: D
質問 19
You are network connectivity issues between two VMS deployed in AWS. One VM is a FortiGate located on subnet *LAN- that is part Of the VPC "Encryption". The Other VM is a Windows server located on the subnet
"servers" Which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate.
What is the reason for this?
- A. The default AWS Network Access Control List (NACL) does not allow this traffic.
- B. You have not created a VPN to allow traffic between those subnets.
- C. The firewall in the Windows VM is blocking the traffic.
- D. By default. AWS does not allow ICMP traffic between subnets.
正解: C
質問 20
You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.
Which license model do you choose?
- A. Pay as a bundle (PAYB).
- B. Bring your own device (BYOD)
- C. pay as you go (PAYG).
- D. Bring your own license (BYOL).
正解: C
質問 21
An administrator has deployed an environment in AWS and is now trying to send outbound traffic from the web servers to the internet through FortiGate. The FortiGate policies are configured to allow all outbound traffic. however. the traffic is not reaching the FortiGate internal interface.
Which two statements Can be the reasons for this behavior? (Choose two )
- A. AWS security groups are blocking the traffic.
- B. Internet Gateway (IGW) is not configured for VPC.
- C. AWS source destination checks are enabled on the FortiGate internal interfaces.
- D. FortiGate is not configured as a default gateway tor web servers.
正解: A,C
質問 22
Refer to the exhibit.
An administrator configured a FortiGate device to connect to me AWS API to retrieve resource values from the AWS console to create dynamic objects tor the FortiGatepolicies. The administrator is unable to retrieve AWS dynamic objects on FortiGate.
Which three reasons can explain btw? (Choose three.)
- A. The AWS Lab SON connector failed to connect on port 401.
- B. The AWS API call is not supported on XML version I . O.
- C. AWS was not able to validate credentials provided by the AWS Lab SON connector.
- D. The AWS Lab SON connector is configured with an invalid AWS access or secret key
- E. The AWS Lab SON connector failed to retrieve the instance list.
正解: C,D,E
質問 23
Which three statements are correct about AWS security groups? (Choose three)
- A. When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules
- B. By default, security groups block all outbound traffic.
- C. a Security group rules are always permissive: you cannot create rules that deny access.
- D. By default,security groups allow all inbound traffic.
- E. Security groups are statetul
正解: A,C,E
質問 24
Refer to the exhibit.
You deployed an active-passive FortiGate HA using a Cloud Formation template on an existing VPC_ Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the elastic and secondary IP addresses.
Which statement is correct about the output of the debug?
- A. The elastic IP is associated with port1of Fgt2.
- B. The routing table for Fgt2 updated successfully. and port2 will provide internet access to Fgt2.
- C. The elastic IP is associated with port2 of Fgt2. and the secondary IP address for port1and port2 was updated successfully.
- D. IP address 10. O. O. L 3 is now associated with eni-Ob61d8afcOaefb8a2.
正解: D
質問 25
Refer to the exhibit.
Which statement is correct about the VPC peering connections shown in the exhibit?
- A. You cannot route packets directly from VPC B to VPC C through VPC A.
- B. You cannot create a VPC peering connection between VPC B
and VPC C to route packets directly. - C. You can associate VPC ID pcx-23232323 with VPC B to form a VPC
peering connection between VPC B and VPC C. - D. TO route packets directly from VPC B to VPC C through VPC A, you must add a route for network 192.168.0.0/16 in the VPC A routing table.
正解: A
質問 26
What is the purpose of the created as part Of a FortiGate autoscale deployment using Fortinet cloud formation template in AWS?
- A. To store the firewall policies used by all FortiGates_
- B. To store information about varying states of auto scaling conditions.
- C. To store the traffic logs Of all FortiGates.
- D. To Store the information used for the scale set.
正解: B
質問 27
A customer needs a recursive DNS for AWS VPC and on-premises networks, The customer also wants to create conditional forwarding rules and DNS endpoints to resolve custom names in AWS private hosted zones and on-premises DNS servers.
Which Amazon service can be used to achieve this scenario?
- A. AWS DynamoOB service
- B. AWS mapping service
- C. Amazon route 53
- D. AWS Lambda service
正解: C
質問 28
......
NSE6_WCS-6.4試験問題高合格率なNSE6_WCS-6.4問題集PDF：https://www.jpntest.com/shiken/NSE6_WCS-6.4-mondaishu