Free Fortinet NSE 6 – Cloud Security 7.0 for AWS Exam NSE6_WCS-7.0 Exam Practice Test

An administrator wants to deploy a solution to automatically create firewall rules on FortiGate to accelerate time-to-protection for threats.Which AWS service can be integrated with FortiGate to accomplish this?

• AWS Firewall Manager
• AWS network access control list
• SDN Connector for AWS
• AWS GuardDuty

AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)

• Higher VPN throughput
• Web filtering
• OSPF over IPSec
• Advanced dynamic routing
• Secure SD-WAN with application visibility

An administrator must deploy a web application firewall (WAF) solution to protect the web applications of their organization.Why would the administrator choose FortiWeb Cloud over AWS WAF with Fortinet managed rules?

• WAF signatures must be manually updated by FortiGuard.
• The solution must meet PCI 6.6 compliance.
• SSL inspection is a requirement.
• Traffic must be inspected for malware.

An AWS administrator is designing internet connectivity for an organization's virtual public cloud (VPC). The organization has web servers with private addresses that must be reachable from the internet. The web servers must be highly available.Which two configurations can you use to ensure the web servers are highly available and reachable from the internet? (Choose two.)

• Deploy a network load balancer.
• Configure a network address translation (NAT) Gateway in your VPC. Place web servers behind the NAT Gateway.
• Add a route to the default virtual public cloud (VPC) route table forwarding all traffic to the internet gateway.
• Deploy web servers in multiple availability zones.

What is a drawback of deploying a FortiWeb VM inside a virtual public cloud (VPC) compared to FortiWeb Cloud?

• It is unable to support web applications from OWASP Top 10 threats.
• It does not support zero-day protection.
• It is slower than FortiWeb Cloud to apply advanced WAF protection.
• Only applications going through the VPC are protected.

Your customers have been reporting slow response times when accessing your web application.What are two possible ways to increase response times from web servers protected by FortiWeb Cloud? (Choose two.)Your customers have been reporting slow response times when accessing your web application. What are two possible ways to increase response times from web servers protected by FortiWeb Cloud? (Choose two.)

• Deploy FortiWeb Cloud in the same region where your web application is being hosted.
• Enable a content delivery network
• Modify DNS entries to directly point to your web server.
• Disable WAF functionality.

Which three statements correctly describe FortiGate Cloud-Native Firewall (CNF)? (Choose three.)

• It provides carrier-grade protection.
• It scales seamlessly.
• It uses AWS Elastic Load Balancing (ELB).
• It is considered to be a Firewall-as-a-Service (FWaaS).
• It can be managed by FortiManager and AWS firewall manager.

An administrator has been asked to deploy an active-passive (A-P) FortiGate cluster in the AWS cloud across two availability zones.In addition to enhanced redundancy, which other major difference is there compared to deploying A- P high availability in the same availability zone?

• The FortiGate devices act as a single, logical instance.
• Secondary IP address configuration is used.
• The number of subnets required is less.
• IP addressing and subnetting are not shared.

An administrator is adding a web application to be protected by FortiWeb Cloud. Which two steps are necessary to successfully onboard the application? (Choose two.) An administrator is adding a web application to be protected by FortiWeb Cloud.Which two steps are necessary to successfully onboard the application? (Choose two.)

• Wait for the EC2 instance to be created.
• Provide a web application name.
• Create DNS records in the domain server that hosts the application.
• Enable a content delivery network (CDN) in the same region where your application is located.

A global organization with cloud networks deployed in several AWS regions wants to set up next- generation firewall (NGFW) protection using FortiGate Cloud-Native Firewall (CNF).What are two deployment considerations for the organization? (Choose two.)

• They must choose AWS Firewall Manager to provision a CNF instance.
• A CNF instance is required for each AWS region that must be protected.
• More than one AWS account can be associated with a CNF instance.
• Only one CNF instance is required to protect all AWS regions.