FCP_WCS_AD-7.4 무료 덤프문제 온라인 액세스

Refer to the exhibit.

Which two statements are true about inbound traffic based on the IGW ingress route table and GWLB deployment shown in the exhibit? (Choose two.)

• A.GWLB forwards traffic to FortiGate without encapsulation in its dedicated subnet.
• B.Inbound traffic is directed to the application subnet through a GWLB endpoint.
• C.Inbound traffic is directed to the GWLB through a GWLB endpoint.
• D.GWLB encapsulates traffic with the GENEVE protocol and sends it to FortiGate.

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

• A.A-A clusters always require a load balancer.
• B.For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
• C.A-A clusters can use a software-defined network (SDN) to perform a failover.
• D.A-A clusters rely on API calls for sfailovers.

Your company deployed a FortiSandbox for AWS.
Which statement is correct about FortiSandbox for AWS?

• A.FortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.
• B.The FortiSandbox manager is installed on the AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.
• C.FortiSandbox for AWS comes as a hybrid solution. The FortiSandbox manager is installed on-premises and analyzes the results of the sandboxing process received from AWS EC2 instances.
• D.FortiSandbox deploys new EC2 instances with the custom Windows and Linux VMs, then it sends malware, runs it, and captures the results for analysis.

Refer to the exhibit.

An administrator configured a FortiGate device to connect to the AWS API to retrieve resource values from the AWS console to create dynamic objects for the FortiGate policies. The administrator is unable to retrieve AWS dynamic objects on FortiGate.
Which two reasons can explain why? (Choose two.)

• A.The AWS API call is not supported on XML version 1.0.
• B.AWS was not able to validate credentials provided by the AWS Lab SDN connector because of a clock skew between FortiGate and AWS.
• C.The AWS Lab SDN did not find any instances in the configured VPC.
• D.The AWS Lab SDN connector is configured with an invalid AWS access or secret key.
• E.The AWS Lab SDN connector failed to connect on port 401.

AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.
Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)

• A.Advanced dynamic routing
• B.Secure SD-WAN with application visibility
• C.Higher VPN throughput
• D.OSPF over IPSec
• E.Web filtering