NSE6_WCS-7.0試験無料問題集（37題）「Fortinet NSE 6

出題：1

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.
The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.
Which action would allow the EIP assignment to be successful?

A. Shut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.

B. Create and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.

C. Create and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.

D. Create and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What is a drawback of deploying a FortiWeb VM inside a virtual public cloud (VPC) compared to FortiWeb Cloud?

A. Only applications going through the VPC are protected.

B. It is unable to support web applications from OWASP Top 10 threats.

C. It is slower than FortiWeb Cloud to apply advanced WAF protection.

D. It does not support zero-day protection.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

Refer to the exhibit.

Traffic is initiated from the EC2 instance and is destined for the internet.
Which traffic flow is correct?

A. EC2 instance > NAT GW > IGW > internet

B. There is no route to the internet in the Private Route Table. The traffic does not reach the internet.

C. EC2 instance > GWLBe > NAT GW > IGW > internet

D. EC2 instance > GWLBe > internet

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which three statements are correct about VPC flow logs? (Choose three.)

A. Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.

B. Flow logs can capture traffic to the reserved IP address for the default VPC router.

C. Flow logs can capture real-time log streams for the network interfaces.

D. Flow logs do not capture DHCP traffic.

E. Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.

正解：A,D,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE6_WCS-7.0試験無料問題集「Fortinet NSE 6 - Cloud Security 7.0 for AWS 認定」