Online Access Free NSE6_WCS-7.0 Practice Test

Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer (ELB).
Which two statements are correct about the ELB configuration? (Choose two.)

• A.The Amazon Resource Name is used to access the load balancer node and targets.
• B.The load balancer is configured to load balance traffic among multiple availability zones.
• C.You can use the DNS name to reach the targets behind the ELB.
• D.The load balancer is configured for the internal traffic of the virtual public cloud (VPC).

Refer to the exhibit.

You deployed an active-passive FortiGate HA cluster using a CloudFormation template on an existing VPC.
Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the Elastic and secondary IP addresses.
Which statement is correct about the output of the debug?

• A.The routing table for Fgt2 updated successfully, and port2 will provide internet access to Fgt2.
• B.The Elastic IP is associated with port1 of Fgt2.
• C.The Elastic IP is associated with port2 of Fgt2, and the secondary IP address for port1 and port2 was updated successfully.
• D.IP address 10.0.0.13 is now associated with eni-0b61d8afc0aefb8a2.

Refer to the exhibit.

Traffic is initiated from the EC2 instance and is destined for the internet.
Which traffic flow is correct?

• A.EC2 instance > GWLBe > NAT GW > IGW > internet
• B.There is no route to the internet in the Private Route Table. The traffic does not reach the internet.
• C.EC2 instance > GWLBe > internet
• D.EC2 instance > NAT GW > IGW > internet

A customer has deployed FortiGate Cloud-Native Firewall (CNF).
Which two statements are correct about policy sets? (Choose two.)

• A.The policy set must be manually synchronized to the CNF instance each time it is modified.
• B.A new policy set is created with each deployed CNF instance.
• C.There is an implicit deny rule at the bottom of the policy set.
• D.Multiple policy sets can be applied to a single CNF instance.

An administrator has been asked to deploy an active-passive (A-P) FortiGate cluster in the AWS cloud across two availability zones.
In addition to enhanced redundancy, which other major difference is there compared to deploying A-P high availability in the same availability zone?

• A.The FortiGate devices act as a single, logical instance.
• B.The number of subnets required is less.
• C.IP addressing and subnetting are not shared.
• D.Secondary IP address configuration is used.