NSE6_WCS-7.0 무료 덤프문제 온라인 액세스

You want to deploy the Fortinet HA CloudFormation template to stage and bootstrap the FortiGate configuration in the same region in which you created your VPC, which is Ohio US-East-2.
Based on this information, which statement is correct?

• A.You create a DynamoDB to stage and bootstrap FortiGate with an FGCP unicast configuration. It needs to be hosted in the Ohio US-East-2 region.
• B.The Fortinet HA cloud formation template automatically creates an S3 bucket.
• C.You create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration. The S3 bucket needs to be hosted in the Ohio US-East-2 region.
• D.You create an S3 bucket to stage and bootstrap FortiGate with an FGCP unicast configuration. The S3 bucket can be hosted in any region.

Refer to the exhibit.

What occurs during a failover for an active-passive (A-P) cluster that is deployed in two different availability zones? (Choose two.)

• A.The default static route in the Private-AZ1 subnet route table is modified to forward all traffic to Port2 of FGT2.
• B.An additional route is added to the route table of the HA Sync AZ2 subnet to forward all traffic to the Internet GW.
• C.The cluster elastic IP address (EIP) is moved from Port1 of FGT-1 to Port1 of FGT-2.
• D.The secondary IP address of Port2 of FGT-1 is moved to Port2 of FGT-2.

Refer to the exhibit.

An organization deployed the application servers in the AWS VPC that connects to the corporate data center using Transit Gateway Connect. Demand for the applications has grown and the connection requires more bandwidth.
What is required to achieve higher bandwidth?

• A.No configuration change is required because GRE tunnels are scaled to provide higher bandwidth.
• B.You cannot increase bandwidth the connection has a fixed limit.
• C.Use routable public IP addresses instead of private IP addresses for connectivity.
• D.You add a Transit VPC between the organization's VPCs.

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.
The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.
Which action would allow the EIP assignment to be successful?

• A.Create and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• B.Create and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• C.Create and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.
• D.Shut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.

Which three statements are correct about VPC flow logs? (Choose three.)

• A.Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.
• B.Flow logs do not capture DHCP traffic.
• C.Flow logs can capture real-time log streams for the network interfaces.
• D.Flow logs can capture traffic to the reserved IP address for the default VPC router.
• E.Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.