NSE6_WCS-7.0無料問題集「Fortinet NSE 6 - Cloud Security 7.0 for AWS」

質問 1

You need to deploy a new Windows server in AWS to offload web traffic from an existing web server in a different availability zone.
According to the AWS shared responsibility model, what three actions must you take to secure the new EC2 instance? (Choose three.)

（A）Configure security groups.

（B）Manage the operating system on the instance.

（C）Move all web servers into the same availability zone.

（D）Update software on the instance.

（E）Change the existing elastic load balancer (ELB) to a gateway load balancer

正解：A、B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Which three statements are correct about VPC flow logs? (Choose three.)

（A）Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

（B）Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.

（C）Flow logs can capture traffic to the reserved IP address for the default VPC router.

（D）Flow logs do not capture DHCP traffic.

（E）Flow logs can capture real-time log streams for the network interfaces.

正解：A、B、D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

A customer is attempting to deploy an active-passive high availability (HA) cluster using the software-defined network (SDN) connector in the AWS cloud.
What is an important consideration to ensure a successful formation of HA, failover, and traffic flow?

（A）Unicast FortiGate Clustering Protocol (FGCP) must be used.

（B）Both cluster members must be in the same availability zone.

（C）Both cluster members must show as healthy in the elastic load balancer (ELB) configuration.

（D）VDOM exceptions must be configured.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Refer to the exhibit.

An administrator configured a FortiGate device to connect to the AWS API to retrieve resource values from the AWS console to create dynamic objects for the FortiGate policies. The administrator is unable to retrieve AWS dynamic objects on FortiGate.
Which two reasons can explain why? (Choose two.)

（A）AWS was not able to validate credentials provided by the AWS Lab SDN connector because of a clock skew between FortiGate and AWS.

（B）The AWS API call is not supported on XML version 1.0.

（C）The AWS Lab SDN connector failed to connect on port 401.

（D）The AWS Lab SDN did not find any instances in the configured VPC.

（E）The AWS Lab SDN connector is configured with an invalid AWS access or secret key.

正解：A、E 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

NSE6_WCS-7.0 無料問題集「Fortinet NSE 6 - Cloud Security 7.0 for AWS」

弊社を連絡する

関連リンク

トップ試験