Fortinet NSE 6 - Cloud Security 7.0 for AWS (NSE6_WCS-7.0) Free Practice Test

Question 1

An administrator needs to attach an Elastic Network Interface (ENI) to an application instance in a VPC with multiple availability zones. An instance runs in availability zone 1.
Which ENI property must the administrator consider when implementing this requirement?

A. When you move an ENI, network traffic remains directed to the old instance until you terminate that instance.

B. An ENI cannot attach to an instance in availability zone 2.

C. After the ENI detaches from one instance, it can reattach only to the same instance.

D. You can detach the primary ENI from an AWS instance.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

An administrator has been asked to deploy an active-passive (A-P) FortiGate cluster in the AWS cloud across two availability zones.
In addition to enhanced redundancy, which other major difference is there compared to deploying A-P high availability in the same availability zone?

A. The number of subnets required is less.

B. The FortiGate devices act as a single, logical instance.

C. IP addressing and subnetting are not shared.

D. Secondary IP address configuration is used.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit.

Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)

A. GWLB forwards traffic to FortiGate without encapsulation in its dedicated subnet.

B. Inbound traffic is directed to the application subnet through a GWLB endpoint.

C. GWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.

D. Inbound traffic is directed to the GWLB through a GWLB endpoint.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

You need to deploy a new Windows server in AWS to offload web traffic from an existing web server in a different availability zone.
According to the AWS shared responsibility model, what three actions must you take to secure the new EC2 instance? (Choose three.)

A. Move all web servers into the same availability zone.

B. Manage the operating system on the instance.

C. Update software on the instance.

D. Configure security groups.

E. Change the existing elastic load balancer (ELB) to a gateway load balancer

Correct Answer: B,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 6 - Cloud Security 7.0 for AWS (NSE6_WCS-7.0) Free Practice Test