Practice NSE6_WCS-7.0 Exam Online

Question 1

HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?

A : The elastic load balancer handles traffic failover using FGCP.

B : The elastic load balancer handles bi-directional traffic failover using a health probe.

C : All FortiGate cluster members send health probes using a dedicated interface.

D : All FortiGate cluster members use unicast FGCP_

Answer: B

Question 2

Which three statements are correct about VPC flow (Choose three.)

A : Flow logs can capture real-time log streams for the network interfaces.

B : Flow logs do not capture DHCP traffic

C : Flow logs can capture traffic to the reserved IP address for the default VPC router.

D : Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

E : Flow logs do not capture traffic to and from 169.2 54 .169.254 for instance metadata.

Answer: A,B,D

Question 3

Which two statements are correct about AWS Network Access Control Lists (NACLS)? (Choose two.)

A : NACLs are stateless: responses to allowed inbound traffic are subject to the rules for outbound traffic.

B : An NACL has separate inbound and outbound rules, and each rule can either allow or deny traffic.

C : By default. each custom NACL allows all inbound and outbound traffic unless you add new rules,

D : VPC automatically comes with a modifiable default NACL, and by default it denies all inbound and outbound IPv4 traffic.

Answer: A,B

Name:	Fortinet NSE 6 - Cloud Security 7.0 for AWS
Exam Code:	NSE6_WCS-7.0
Certification:	NSE 6 Network Security Specialist
Vendor:	Fortinet
Total Questions:	30
Last Updated:	Apr 25, 2024

Fortinet NSE6_WCS-7.0