Fortinet NSE6_WCS-6.4試験情報と無料練習テスト問題で合格せよ
2022年最新のの問題NSE6_WCS-6.4問題集で更新されたFortinet試験問題集を試そう
Fortinet NSE6_WCS-6.4 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
質問 18
Which three statements are correct about AWS security groups? (Choose three)
- A. a Security group rules are always permissive: you cannot create rules that deny access.
- B. By default, security groups block all outbound traffic.
- C. By default,security groups allow all inbound traffic.
- D. Security groups are statetul
- E. When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules
正解: A,D,E
質問 19
HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?
- A. All FortiGate cluster members send health probes using a dedicated interface.
- B. The elastic load balancer handles bi-directional traffic failover using a health probe.
- C. The elastic load balancer handles traffic failover using FGCP.
- D. All FortiGate cluster members use unicast FGCP_
正解: B
質問 20
You want to deploy the Fortinet HA cloud formation template to stage and bootstrap the FortiGate configuration in the same that you created your VPC, Whichis Ohio US-East-2.
Based on this information, Which statement is correct?
- A. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in any region.
- B. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP multicast configuration in the Ohio US-East-2 region.
- C. The Fortinet HA cloud formation template automatically creates an S3 bucket.
- D. You must create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration in the Ohio US-East-2 region.
正解: C
質問 21
Refer to the exhibit.
You deployed an active-passive FortiGate HA using a Cloud Formation template on an existing VPC_ Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the elastic and secondary IP addresses.
Which statement is correct about the output of the debug?
- A. IP address 10. O. O. L 3 is now associated with eni-Ob61d8afcOaefb8a2.
- B. The routing table for Fgt2 updated successfully. and port2 will provide internet access to Fgt2.
- C. The elastic IP is associated with port1of Fgt2.
- D. The elastic IP is associated with port2 of Fgt2. and the secondary IP address for port1and port2 was updated successfully.
正解: A
質問 22
Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?
- A. AWS Protector
- B. AWS GuardDuty
- C. AWS Inspector
- D. AWS Shield
正解: D
質問 23
You connected to the AWS Management Console at 10:00 AM and verified that there are two FortiGate VMS running, You receive a call from a user reporting about a temporary slow Internet connection that lasted only a few minutes. When you go back to the AWS portal. you notice there are now two additional FortiGate VMS that you did not create. Later that day, the number of VMS returns to two without your intervention. A similar situation occurs several times during the week.
What is the most likely reason for this to happen?
- A. The user ran a script to create the extra VMS to get faster connectivity.
- B. The AWS portal is not refreshed automatically. and another administrator is creating and removing the VMS as needed.
- C. Autoscaling is configured to act as described in the scenario.
- D. The VMS are in an availability group with dynamic membership.
正解: C
質問 24
What is the purpose of the created as part Of a FortiGate autoscale deployment using Fortinet cloud formation template in AWS?
- A. To store information about varying states of auto scaling conditions.
- B. To Store the information used for the scale set.
- C. To store the firewall policies used by all FortiGates_
- D. To store the traffic logs Of all FortiGates.
正解: A
質問 25
Which three statements are correct about Amazon Web Services networking? (Choose three.)
- A. You cannot configure gratuitous ARP but you can configure proxy ARP.
- B. You cannot deploy FortiGate in transparent mode in AWS.
- C. You cannot use custom frames in AWS
- D. You can configure instant IP failover in AWS.
- E. You can use unicast the FGCP protocol
正解: B,C,E
質問 26
An administrator has deployed an environment in AWS and is now trying to send outbound traffic from the web servers to the internet through FortiGate. The FortiGate policies are configured to allow all outbound traffic. however. the traffic is not reaching the FortiGate internal interface.
Which two statements Can be the reasons for this behavior? (Choose two )
- A. Internet Gateway (IGW) is not configured for VPC.
- B. FortiGate is not configured as a default gateway tor web servers.
- C. AWS security groups are blocking the traffic.
- D. AWS source destination checks are enabled on the FortiGate internal interfaces.
正解: C,D
質問 27
An MSSP deployed 16 FortiGate VMS With the default AWS security groups and network access lists using an on-demand license from Amazon Web Services (AWS) Marketplace. They are using a third-party configuration backup application to back up and track changes for the FortiGate configurations. It can connect to the FortiGatedevices using only the SSH protocol, A customer is using the correct username and password configured on the FortiGate devices. but they are unable to log in using theSSH protocol.
What can be the reason Why this authentication is failing?
- A. The default AWS Security group for FortiGate does not allow SSH.
- B. The AWS key is required to log in to FortiGate using SSH
- C. The default AWS network access list for FortiGate does not allow SSH.
- D. AWS uses non-standard SSH port1025, and the default AWS security groups and NACL for FortiGate are not configured for the port.
正解: B
質問 28
Refer to the exhibit.
An administrator configured two auto-scaling polices that they now want to test, What Will be the impact on payg-auto-scaling-group for the FortiGate devices if the administrator executes a scale-in policy?
- A. The scale-in policy will decrease instances from two to one.
- B. The scale-in policy will decrease the number of maximum instances from four to three.
- C. The scale-in policy will decrease the desired capacity from two to one
正解: B
質問 29
Which three Fortinet products are available in Amazon Web Services in both on-demand and bring your own license (BYOL) formats? (Choose three.)
- A. FortiSOAR
- B. FortiSlEM
- C. FortiGate
- D. FortiADC
- E. FortiWeb
正解: C,D,E
質問 30
......
最新のNSE6_WCS-6.4試験問題集でFortinet試験が合格できます：https://jp.fast2test.com/NSE6_WCS-6.4-premium-file.html
合格できるFortinet NSE6_WCS-6.4のPDF問題集で最近更新された32問あります：https://drive.google.com/open?id=1Vs7IWBnwJUIsZCPCQsHE7cQfNnRFM4US