[Dec-2022] Fortinet NSE6_WCS-6.4 DUMPS WITH REAL EXAM QUESTIONS [Q12-Q35]

Rate this post

[Dec-2022] Fortinet NSE6_WCS-6.4 DUMPS WITH REAL EXAM QUESTIONS

2022 New ExamDumpsVCE NSE6_WCS-6.4 PDF Recently Updated Questions

Fortinet NSE6_WCS-6.4 Exam Syllabus Topics:

Topic	Details
Topic 1	Configure FortiGate AWS SDN integration Fundamentals of securing AWS
Topic 2	Configure and secure AWS cloud Fortinet solution for AWS
Topic 3	Configure the load balancer and autoscaling Identify Fortinet products on AWS Marketplace

QUESTION 12
Which three statements are correct about AWS security groups? (Choose three)

a Security group rules are always permissive: you cannot create rules that deny access.

By default, security groups block all outbound traffic.

When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

Security groups are statetul

By default,security groups allow all inbound traffic.

QUESTION 13
HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?

The elastic load balancer handles traffic failover using FGCP.

The elastic load balancer handles bi-directional traffic failover using a health probe.

All FortiGate cluster members send health probes using a dedicated interface.

All FortiGate cluster members use unicast FGCP_

QUESTION 14
A customer deployed an HA Cloud formation to Stage and bootstrap the FortiGate configuration.
Which AWS functions are used by FortiGate HA to call the HA failover?

AWS Lambda functions

AWS Mapping functions

AWS S3 functions

AWS DynamoDB functions

QUESTION 15
An organization has created a VPC and deployed a FortiGate-VM (VM04 /c4.xlarge) in AWS, FortiGate-VM is initially configured With two Elastic Network Interfaces (ENIs). The primary ENI of FortiGate-VM is configured for a public subnet. and the second ENI is configured for a private subnet. In order to provide internet access. they now want to add an EIP to the primary ENI of FortiGate, but the EIP assignment is failing.
Which action would allow the EIP assignment to be successful?

Shut down the FortiGate VM. if it is running. assign the EIP to the primary ENI. and then power it on.

Create and associate a public subnet With the primary ENI Of FortiGate, and then assign the EIP to the primary ENI.

Create and attach a public routing table to the public subnet, associate the public subnet With the primary ENI Of FortiGate. and then assign the EP to the primary ENI.

Create and attach an Internet gateway to the VPC. and then assign the EIP to the primary ENI Of FortiGate.

QUESTION 16
You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.
Which license model do you choose?

pay as you go (PAYG).

Bring your own device (BYOD)

Bring your own license (BYOL).

Pay as a bundle (PAYB).

QUESTION 17
Refer to the exhibit.

You have created an autoscale configuration using a FortiGate HA Cloud
Formation template. You want to examine the autoscale FortiOS configuration to confirm that FortiGate autoscale is configured to synchronize primary and secondary devices. On one of the FortiGate devices, you execute the command shown in the exhibit Which statement is correct about the output of the command?

The device is the primary in the HA configuration. with the IP address
10.0.0.173.

The device is the secondary in the HA configuration, and the IP address Of the primary device is 10.0.0.173.

The device is the primary in the HA configurationand the IP address of the secondary device is10.0.0.173.

The device is the secondary in the HA configuration. with the IP address
10.0.0.173.

QUESTION 18
Which AWS product integrates With FortiGate to automate security remediation for workloads running on the AWS platform?

AWS Protector

AWS Inspector

AWS Shield

AWS GuardDuty

QUESTION 19
Which three Fortinet products are available in Amazon Web Services in both on-demand and bring your own license (BYOL) formats? (Choose three.)

FortiGate

FortiWeb

FortiADC

FortiSlEM

FortiSOAR

QUESTION 20
Which statement is true about an Elastic Network Interface (ENI)?

Once ENI detaches from one instance. it cannot reattach to another instance.

You can detach primary ENI from an AWS instance.

An ENI cannot move between AZs.

When youmove an ENI, network traffic is not redirected to the new instance.

QUESTION 21
Which three statements are correct about Amazon Web Services networking? (Choose three.)

You can configure instant IP failover in AWS.

You cannot configure gratuitous ARP but you can configure proxy ARP.

You cannot deploy FortiGate in transparent mode in AWS.

You cannot use custom frames in AWS

You can use unicast the FGCP protocol

QUESTION 22
Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer.
Which two statements are correct about the Elastic LoadBalancer configuration? (Choose two.)

The Amazon resource name is used to access the load balancer node and targets.

The DNS name is used to access devices.

The load balancer is configured to load balance traffic between devices in two AZS.

The load balancer is configuredfor the internal traffic oftheVPC

QUESTION 23
You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Whichis Ohio US-East-2.
Based on this information, Which statement is correct?

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in the Ohio US-East-2 region.

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP multicast configuration in the Ohio US-East-2 region.

You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in any region.

The Fortinet HA cloud formation template automatically creates an S3 bucket.

Loading …