NSE6_WCS-7.0 Exam Training Practice Tests (Fortinet NSE 6

Question 1

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

A. A-A clusters always require a load balancer. B. For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow. C. A-A clusters can use a software-defined network (SDN) to perform a failover. D. A-A clusters rely on API calls for sfailovers.

Correct Answer: A,B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

A global organization with cloud networks deployed in several AWS regions wants to set up next-generation firewall (NGFW) protection using FortiGate Cloud-Native Firewall (CNF).
What are two deployment considerations for the organization? (Choose two.)

A. A CNF instance is required for each AWS region that must be protected. B. They must choose AWS Firewall Manager to provision a CNF instance. C. More than one AWS account can be associated with a CNF instance. D. Only one CNF instance is required to protect all AWS regions.

Correct Answer: A,C

Question 3

An organization has the requirement to connect a data VPC to the on-premises infrastructure of a branch office in a hybrid cloud environment. The connectivity needs the higher bandwidth but the organization does not want to use multiple connections between sites.
Which AWS solution meets the requirement?

A. Transit Gateway Connect B. Transit VPC with IPSec C. Internet Gateway D. Transit Gateway multicast

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

An administrator must deploy a web application firewall (WAF) solution to protect the web applications of their organization.
Why would the administrator choose FortiWeb Cloud over AWS WAF with Fortinet managed rules?

A. SSL inspection is a requirement. B. WAF signatures must be manually updated by FortiGuard. C. Traffic must be inspected for malware. D. The solution must meet PCI 6.6 compliance.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Fortinet NSE 6 - Cloud Security 7.0 for AWS - NSE6_WCS-7.0 Exam Practice Test