[Apr-2023] Get 100% Real NSE6_WCS-6.4 Exam Questions, Accurate & Verified Test4Engine Dumps in the Real Exam! [Q19-Q38] : Exam for engine : http://blog.test4engine.com

NO.19 You connected to the AWS Management Console at 10:00 AM and verified that there are two FortiGate VMS running, You receive a call from a user reporting about a temporary slow Internet connection that lasted only a few minutes. When you go back to the AWS portal. you notice there are now two additional FortiGate VMS that you did not create. Later that day, the number of VMS returns to two without your intervention. A similar situation occurs several times during the week.
What is the most likely reason for this to happen?

The VMS are in an availability group with dynamic membership.

Autoscaling is configured to act as described in the scenario.

The user ran a script to create the extra VMS to get faster connectivity.

The AWS portal is not refreshed automatically. and another administrator is creating and removing the VMS as needed.

NO.20 A customer needs a recursive DNS for AWS VPC and on-premises networks, The customer also wants to create conditional forwarding rules and DNS endpoints to resolve custom names in AWS private hosted zones and on-premises DNS servers.
Which Amazon service can be used to achieve this scenario?

AWS mapping service

Amazon route 53

AWS DynamoOB service

AWS Lambda service

NO.21 Refer to the exhibit.

Which statement is correct about the VPC peering connections shown in the exhibit?

You can associate VPC ID pcx-23232323 with VPC B to form a VPC
peering connection between VPC B and VPC C.

You cannot route packets directly from VPC B to VPC C through VPC A.

TO route packets directly from VPC B to VPC C through VPC A, you must add a route for network 192.168.0.0/16 in the VPC A routing table.

You cannot create a VPC peering connection between VPC B
and VPC C to route packets directly.

NO.22 Which features are only available on FortiWeb when compared to Fortinet Managed Rules for AWS WAF?

FortiWeb meets PCI 6.6 compliance.

FortiWeb can scan web application vulnerabilities.

FortiWeb provides a WAF subscription (FortiGuard) option.

FortiWeb provides web application attack signatures.

NO.23 Which three statements are correct about AWS security groups? (Choose three)

a Security group rules are always permissive: you cannot create rules that deny access.

By default, security groups block all outbound traffic.

When associate multiple security groups With an instance, the rules from each security group are effectively aggregated to create one set Of rules

Security groups are statetul

By default,security groups allow all inbound traffic.

NO.24 Which two statements are correct about AWS Network Access Control Lists (NACLS)? (Choose two.)

NACLs are stateless: responses to allowed inbound traffic are subject to the rules for outbound traffic.

An NACL has separate inbound and outbound rules, and each rule can either allow or deny traffic.

By default. each custom NACL allows all inbound and outbound traffic unless you add new rules,

VPC automatically comes with a modifiable default NACL, and by default it denies all inbound and outbound IPv4 traffic.

NO.25 Which statement is true about an Elastic Network Interface (ENI)?

Once ENI detaches from one instance. it cannot reattach to another instance.

You can detach primary ENI from an AWS instance.

An ENI cannot move between AZs.

When youmove an ENI, network traffic is not redirected to the new instance.

NO.26 You are network connectivity issues between two VMS deployed in AWS. One VM is a FortiGate located on subnet *LAN- that is part Of the VPC “Encryption”. The Other VM is a Windows server located on the subnet
“servers” Which is also in the “Encryption” VPC. You are unable to ping the Windows server from FortiGate.
What is the reason for this?

You have not created a VPN to allow traffic between those subnets.

By default. AWS does not allow ICMP traffic between subnets.

The default AWS Network Access Control List (NACL) does not allow this traffic.

The firewall in the Windows VM is blocking the traffic.

NO.27 Which product you Can use as AWS WAF web access control lists (web ACLS) to minimize the effects Of a DDOS attack?

AWS Protector

AWS GuardDuty

AWS Inspector

AWS Shield

NO.28 You want to deploy FortiGate for AWS to protect your production network in the cloud. but you do not need the 2417 support available in the enterprise bundle.
Which license model do you choose?

pay as you go (PAYG).

Bring your own device (BYOD)

Bring your own license (BYOL).

Pay as a bundle (PAYB).

NO.29 An organization has created a VPC and deployed a FortiGate-VM (VM04 /c4.xlarge) in AWS, FortiGate-VM is initially configured With two Elastic Network Interfaces (ENIs). The primary ENI of FortiGate-VM is configured for a public subnet. and the second ENI is configured for a private subnet. In order to provide internet access. they now want to add an EIP to the primary ENI of FortiGate, but the EIP assignment is failing.
Which action would allow the EIP assignment to be successful?

Shut down the FortiGate VM. if it is running. assign the EIP to the primary ENI. and then power it on.

Create and associate a public subnet With the primary ENI Of FortiGate, and then assign the EIP to the primary ENI.

Create and attach a public routing table to the public subnet, associate the public subnet With the primary ENI Of FortiGate. and then assign the EP to the primary ENI.

Create and attach an Internet gateway to the VPC. and then assign the EIP to the primary ENI Of FortiGate.

NO.30 Refer to the exhibit.

A customer is using the AWS Elastic Load Balancer.
Which two statements are correct about the Elastic LoadBalancer configuration? (Choose two.)

The Amazon resource name is used to access the load balancer node and targets.

The DNS name is used to access devices.

The load balancer is configured to load balance traffic between devices in two AZS.

The load balancer is configuredfor the internal traffic oftheVPC