Online Access Free NSE6_WCS-6.4 Practice Test

Which AWS product integrates With FortiGate to automate security remediation for workloads running on the AWS platform?

• A.AWS Shield
• B.AWS GuardDuty
• C.AWS Protector
• D.AWS Inspector

What is the purpose of the created as part Of a FortiGate autoscale deployment using Fortinet cloud formation template in AWS?

• A.To store information about varying states of auto scaling conditions.
• B.To store the firewall policies used by all FortiGates_
• C.To Store the information used for the scale set.
• D.To store the traffic logs Of all FortiGates.

An MSSP deployed 16 FortiGate VMS With the default AWS security groups and network access lists using an on-demand license from Amazon Web Services (AWS) Marketplace. They are using a third-party configuration backup application to back up and track changes for the FortiGate configurations. It can connect to the FortiGatedevices using only the SSH protocol, A customer is using the correct username and password configured on the FortiGate devices. but they are unable to log in using theSSH protocol.
What can be the reason Why this authentication is failing?

• A.The AWS key is required to log in to FortiGate using SSH
• B.The default AWS Security group for FortiGate does not allow SSH.
• C.The default AWS network access list for FortiGate does not allow SSH.
• D.AWS uses non-standard SSH port1025, and the default AWS security groups and NACL for FortiGate are not configured for the port.

You are network connectivity issues between two VMS deployed in AWS. One VM is a FortiGate located on subnet *LAN- that is part Of the VPC "Encryption". The Other VM is a Windows server located on the subnet
"servers" Which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate.
What is the reason for this?

• A.You have not created a VPN to allow traffic between those subnets.
• B.The default AWS Network Access Control List (NACL) does not allow this traffic.
• C.The firewall in the Windows VM is blocking the traffic.
• D.By default. AWS does not allow ICMP traffic between subnets.

You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.
Which license model do you choose?

• A.Pay as a bundle (PAYB).
• B.Bring your own license (BYOL).
• C.pay as you go (PAYG).
• D.Bring your own device (BYOD)