NSE6_WCS-6.4問題集最新の2023年01月14日練習テスト32リアル解答があります
2023年最新の100%試験高合格率NSE6_WCS-6.4問題集PDF
質問 17
A customer deployed Fortinet Managed Rules for Amazon Web Services (AWS) Web-Application Firewall (WAF) to protect web application servers from attacks.
Which statement about Fortinet Managed Rules for AWS WAF is correct?
- A. It can provide IP Reputation (WAF subscription FortiGuard).
- B. It can perform bot and known search engine identification and protection
- C. It offers a negative security model.
- D. It can provide Layer 7 DOS protection.
正解: B
質問 18
You connected to the AWS Management Console at 10:00 AM and verified that there are two FortiGate VMS running, You receive a call from a user reporting about a temporary slow Internet connection that lasted only a few minutes. When you go back to the AWS portal. you notice there are now two additional FortiGate VMS that you did not create. Later that day, the number of VMS returns to two without your intervention. A similar situation occurs several times during the week.
What is the most likely reason for this to happen?
- A. The AWS portal is not refreshed automatically. and another administrator is creating and removing the VMS as needed.
- B. The VMS are in an availability group with dynamic membership.
- C. Autoscaling is configured to act as described in the scenario.
- D. The user ran a script to create the extra VMS to get faster connectivity.
正解: C
質問 19
Refer to the exhibit.
Which statement is correct about the VPC peering connections shown in the exhibit?
- A. You cannot route packets directly from VPC B to VPC C through VPC A.
- B. TO route packets directly from VPC B to VPC C through VPC A, you must add a route for network 192.168.0.0/16 in the VPC A routing table.
- C. You cannot create a VPC peering connection between VPC B
and VPC C to route packets directly. - D. You can associate VPC ID pcx-23232323 with VPC B to form a VPC
peering connection between VPC B and VPC C.
正解: A
質問 20
Which three Fortinet products are available in Amazon Web Services in both on-demand and bring your own license (BYOL) formats? (Choose three.)
- A. FortiGate
- B. FortiWeb
- C. FortiSlEM
- D. FortiSOAR
- E. FortiADC
正解: A,B,E
質問 21
Refer to the exhibit.
You have created an autoscale configuration using a FortiGate HA Cloud
Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate autoscale is configured to synchronize primary and secondary devices. On one of the FortiGate devices, you execute the command shown in the exhibit Which statement is correct about the output of the command?
- A. The device is the primary in the HA configurationand the IP address of the secondary device is10.0.0.173.
- B. The device is the secondary in the HA configuration. with the IP address
10.0.0.173. - C. The device is the secondary in the HA configuration, and the IP address Of the primary device is 10.0.0.173.
- D. The device is the primary in the HA configuration. with the IP address
10.0.0.173.
正解: C
質問 22
Which statement is true about an Elastic Network Interface (ENI)?
- A. When youmove an ENI, network traffic is not redirected to the new instance.
- B. You can detach primary ENI from an AWS instance.
- C. Once ENI detaches from one instance. it cannot reattach to another instance.
- D. An ENI cannot move between AZs.
正解: D
質問 23
Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?
- A. AWS GuardDuty
- B. AWS Protector
- C. AWS Inspector
- D. AWS Shield
正解: D
質問 24
Which features are only available on FortiWeb when compared to Fortinet Managed Rules for AWS WAF?
- A. FortiWeb provides a WAF subscription (FortiGuard) option.
- B. FortiWeb provides web application attack signatures.
- C. FortiWeb meets PCI 6.6 compliance.
- D. FortiWeb can scan web application vulnerabilities.
正解: D
質問 25
An MSSP deployed 16 FortiGate VMS With the default AWS security groups and network access lists using an on-demand license from Amazon Web Services (AWS) Marketplace. They are using a third-party configuration backup application to back up and track changes for the FortiGate configurations. It can connect to the FortiGatedevices using only the SSH protocol, A customer is using the correct username and password configured on the FortiGate devices. but they are unable to log in using theSSH protocol.
What can be the reason Why this authentication is failing?
- A. The default AWS network access list for FortiGate does not allow SSH.
- B. AWS uses non-standard SSH port1025, and the default AWS security groups and NACL for FortiGate are not configured for the port.
- C. The AWS key is required to log in to FortiGate using SSH
- D. The default AWS Security group for FortiGate does not allow SSH.
正解: C
質問 26
What is the purpose of the created as part Of a FortiGate autoscale deployment using Fortinet cloud formation template in AWS?
- A. To store the traffic logs Of all FortiGates.
- B. To Store the information used for the scale set.
- C. To store information about varying states of auto scaling conditions.
- D. To store the firewall policies used by all FortiGates_
正解: C
質問 27
A customer deployed an HA Cloud formation to Stage and bootstrap the FortiGate configuration.
Which AWS functions are used by FortiGate HA to call the HA failover?
- A. AWS Mapping functions
- B. AWS DynamoDB functions
- C. AWS S3 functions
- D. AWS Lambda functions
正解: D
質問 28
Which AWS product integrates With FortiGate to automate security remediation for workloads running on the AWS platform?
- A. AWS Shield
- B. AWS Protector
- C. AWS Inspector
- D. AWS GuardDuty
正解: D
質問 29
......
Fortinet NSE6_WCS-6.4 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
検証済みNSE6_WCS-6.4問題集と解答100%合格はJPNTest：https://www.jpntest.com/shiken/NSE6_WCS-6.4-mondaishu