FCP_WCS_AD-7.4 무료 덤프문제 온라인 액세스

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.
The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.
Which action would allow the EIP assignment to be successful?

• A.Create and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.
• B.Create and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• C.Shut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.
• D.Create and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.

Refer to the exhibit.

Which statement is correct about the VPC peering connections shown in the exhibit?

• A.To route packets directly from VPC B to VPC C through VPC A, you must add a route for network 192.168.0.0/16 in the VPC A routing table.
• B.You can associate VPC ID pcx-23232323 with VPC B to form a VPC peering connection between VPC B and VPC C.
• C.You cannot create a separate VPC peering connection between VPC B and VPC C to route packets directly.
• D.You cannot route packets directly from VPC B to VPC C through VPC A.

What is a drawback of deploying a FortiWeb VM inside a virtual public cloud (VPC) compared to FortiWeb Cloud?

• A.It does not support zero-day protection.
• B.Only applications going through the VPC are protected.
• C.It is slower than FortiWeb Cloud to apply advanced WAF protection.
• D.It is unable to support web applications from OWASP Top 10 threats.

You are troubleshooting network connectivity issues between two VMs deployed in AWS.
One VM is a FortiGate located on subnet "LAN" that is part of the VPC "Encryption". The other VM is a Windows server located on the subnet "servers" which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate.
What are two reasons for this? (Choose two.)

• A.The default AWS Network Access Control List (NACL) does not allow this traffic.
• B.Add an inbound allow ICMP rule in the security group attached to the windows server.
• C.By default, AWS does not allow ICMP traffic between subnets.
• D.The firewall in the Windows VM is blocking the traffic.

Your company deployed a FortiSandbox for AWS.
Which statement is correct about FortiSandbox for AWS?

• A.FortiSandbox for AWS comes as a hybrid solution. The FortiSandbox manager is installed on-premises and analyzes the results of the sandboxing process received from AWS EC2 instances.
• B.The FortiSandbox manager is installed on the AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.
• C.FortiSandbox deploys new EC2 instances with the custom Windows and Linux VMs, then it sends malware, runs it, and captures the results for analysis.
• D.FortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.