Fortinet NSE6_WCS-7.0 Exam Real Questions

Prepare and pass your Fortinet NSE 6 - Cloud Security 7.0 for AWS with free NSE6_WCS-7.0 exam questions.

Page: 1 / 6

Total 30 Questions | Updated On: Oct 08, 2024

Add To Cart

Question 1

Which three statements are correct about VPC flow (Choose three.)

A : ow logs can capture real-time log streams for the network interfaces.

B : ow logs do not capture DHCP traffic

C : ow logs can capture traffic to the reserved IP address for the default VPC router.

D : ow logs can be used as a security tool to monitor the traffic that is reaching the instance.

E : ow logs do not capture traffic to and from 169.2 54 .169.254 for instance metadata.

Answer: A,B,D

Question 2

Which two statements are correct about AWS Network Access Control Lists (NACLS)? (Choose two.)

A : CLs are stateless: responses to allowed inbound traffic are subject to the rules for outbound traffic.

B : NACL has separate inbound and outbound rules, and each rule can either allow or deny traffic.

C : default. each custom NACL allows all inbound and outbound traffic unless you add new rules,

D : automatically comes with a modifiable default NACL, and by default it denies all inbound and outbound IPv4 traffic.

Answer: A,B

Question 3

HOW is traffic failover handled in a FortiGate active-active cluster deployed in AWS?

A : elastic load balancer handles traffic failover using FGCP.

B : elastic load balancer handles bi-directional traffic failover using a health probe.

C : l FortiGate cluster members send health probes using a dedicated interface.

D : l FortiGate cluster members use unicast FGCP_

Answer: B

Page: 1 / 6

Total 30 Questions | Updated On: Oct 08, 2024

Add To Cart