[2023年04月09日] 問題集お試しセットNSE6_WCS-6.4テストエンジントレーニング問題集には32問あります
Fortinet NSE6_WCS-6.4問題集で100%カバー率リアル試験問題
質問 15
Refer to the exhibit.
You have created an autoscale configuration using a FortiGate HA Cloud
Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate autoscale is configured to synchronize primary and secondary devices. On one of the FortiGate devices, you execute the command shown in the exhibit Which statement is correct about the output of the command?
- A. The device is the primary in the HA configurationand the IP address of the secondary device is10.0.0.173.
- B. The device is the secondary in the HA configuration. with the IP address
10.0.0.173. - C. The device is the secondary in the HA configuration, and the IP address Of the primary device is 10.0.0.173.
- D. The device is the primary in the HA configuration. with the IP address
10.0.0.173.
正解: C
質問 16
Refer to the exhibit.
An administrator configured two auto-scaling polices that they now want to test, What Will be the impact on payg-auto-scaling-group for the FortiGate devices if the administrator executes a scale-in policy?
- A. The scale-in policy will decrease the desired capacity from two to one
- B. The scale-in policy will decrease the number of maximum instances from four to three.
- C. The scale-in policy will decrease instances from two to one.
正解: B
質問 17
An organization has created a VPC and deployed a FortiGate-VM (VM04 /c4.xlarge) in AWS, FortiGate-VM is initially configured With two Elastic Network Interfaces (ENIs). The primary ENI of FortiGate-VM is configured for a public subnet. and the second ENI is configured for a private subnet. In order to provide internet access. they now want to add an EIP to the primary ENI of FortiGate, but the EIP assignment is failing.
Which action would allow the EIP assignment to be successful?
- A. Create and attach an Internet gateway to the VPC. and then assign the EIP to the primary ENI Of FortiGate.
- B. Shut down the FortiGate VM. if it is running. assign the EIP to the primary ENI. and then power it on.
- C. Create and attach a public routing table to the public subnet, associate the public subnet With the primary ENI Of FortiGate. and then assign the EP to the primary ENI.
- D. Create and associate a public subnet With the primary ENI Of FortiGate, and then assign the EIP to the primary ENI.
正解: A
質問 18
You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Whichis Ohio US-East-2.
Based on this information, Which statement is correct?
- A. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in the Ohio US-East-2 region.
- B. The Fortinet HA cloud formation template automatically creates an S3 bucket.
- C. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in any region.
- D. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP multicast configuration in the Ohio US-East-2 region.
正解: B
質問 19
Refer to the exhibit.
Which statement is correct about the VPC peering connections shown in the exhibit?
- A. You can associate VPC ID pcx-23232323 with VPC B to form a VPC
peering connection between VPC B and VPC C. - B. TO route packets directly from VPC B to VPC C through VPC A, you must add a route for network 192.168.0.0/16 in the VPC A routing table.
- C. You cannot create a VPC peering connection between VPC B
and VPC C to route packets directly. - D. You cannot route packets directly from VPC B to VPC C through VPC A.
正解: D
質問 20
Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?
- A. AWS Inspector
- B. AWS Shield
- C. AWS GuardDuty
- D. AWS Protector
正解: B
質問 21
Refer to the exhibit.
An administrator wants to update the database package from
the Internet to a database server configured with IP address
Which statement is correct about traffic from server IP address
10.0.1.7 to the internet. based on the diagrarm?
- A. Traffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.1 - B. Traffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100 2. - C. Traffic from server 10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.3 - D. Traffic from server10.0.1.7 to the internet will hide
behind elastic IP 198.51.100.4
正解: D
質問 22
A customer needs a recursive DNS for AWS VPC and on-premises networks, The customer also wants to create conditional forwarding rules and DNS endpoints to resolve custom names in AWS private hosted zones and on-premises DNS servers.
Which Amazon service can be used to achieve this scenario?
- A. AWS DynamoOB service
- B. AWS Lambda service
- C. Amazon route 53
- D. AWS mapping service
正解: C
質問 23
A customer deployed Fortinet Managed Rules for Amazon Web Services (AWS) Web-Application Firewall (WAF) to protect web application servers from attacks.
Which statement about Fortinet Managed Rules for AWS WAF is correct?
- A. It can perform bot and known search engine identification and protection
- B. It offers a negative security model.
- C. It can provide Layer 7 DOS protection.
- D. It can provide IP Reputation (WAF subscription FortiGuard).
正解: A
質問 24
Which statement is true about an Elastic Network Interface (ENI)?
- A. An ENI cannot move between AZs.
- B. You can detach primary ENI from an AWS instance.
- C. When youmove an ENI, network traffic is not redirected to the new instance.
- D. Once ENI detaches from one instance. it cannot reattach to another instance.
正解: A
質問 25
You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.
Which license model do you choose?
- A. pay as you go (PAYG).
- B. Pay as a bundle (PAYB).
- C. Bring your own license (BYOL).
- D. Bring your own device (BYOD)
正解: A
質問 26
Which three statements are correct about VPC flow (Choose three.)
- A. Flow logs can capture real-time log streams for the network interfaces.
- B. Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.
- C. Flow logs do not capture traffic to andfrom169.2 54 .169.254 for instance metadata.
- D. Flow logs do not capture DHCP traffic.
- E. Flow logs can capture traffic to the reserved IP address for the default VPC router.
正解: B,C,D
質問 27
......
実際にあるNSE6_WCS-6.4問題集PDFで100%合格率保証付きます：https://www.jpntest.com/shiken/NSE6_WCS-6.4-mondaishu