Free Online Fortinet NSE6_WCS-7.0 Practice Test

Prepare Your Fortinet NSE6_WCS-7.0 Exam Questions with Free online NSE6_WCS-7.0 Practice Test. Get Brilliant Fortinet NSE 6 - Cloud Security 7.0 for AWS Exam Results with Valid NSE6 WCS 7.0 Exam Dumps.

Page: 1 / 6

Total 30 Questions | Updated On: Apr 24, 2024

Question 1

Which three statements are correct about VPC flow (Choose three.)

A : Flow logs can capture real-time log streams for the network interfaces.

B : Flow logs do not capture DHCP traffic

C : Flow logs can capture traffic to the reserved IP address for the default VPC router.

D : Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

E : Flow logs do not capture traffic to and from 169.2 54 .169.254 for instance metadata.

Answer: A,B,D

Question 2

Which two statements are correct about AWS Network Access Control Lists (NACLS)? (Choose two.)

A : NACLs are stateless: responses to allowed inbound traffic are subject to the rules for outbound traffic.

B : An NACL has separate inbound and outbound rules, and each rule can either allow or deny traffic.

C : By default. each custom NACL allows all inbound and outbound traffic unless you add new rules,

D : VPC automatically comes with a modifiable default NACL, and by default it denies all inbound and outbound IPv4 traffic.

Answer: A,B

Question 3

HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?

A : The elastic load balancer handles traffic failover using FGCP.

B : The elastic load balancer handles bi-directional traffic failover using a health probe.

C : All FortiGate cluster members send health probes using a dedicated interface.

D : All FortiGate cluster members use unicast FGCP_

Answer: B

Page: 1 / 6

Total 30 Questions | Updated On: Apr 24, 2024