Free Fortinet NSE 6 – Cloud Security 7.0 for AWS Exam NSE6_WCS-7.0 Exam Practice Test

Your customers have been reporting slow response times when accessing your web application.What are two possible ways to increase response times from web servers protected by FortiWeb Cloud? (Choose two.)Your customers have been reporting slow response times when accessing your web application. What are two possible ways to increase response times from web servers protected by FortiWeb Cloud? (Choose two.)

• Deploy FortiWeb Cloud in the same region where your web application is being hosted.
• Enable a content delivery network
• Modify DNS entries to directly point to your web server.
• Disable WAF functionality.

Which three statements are correct about VPC flow logs? (Choose three.)

• Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.
• Flow logs do not capture DHCP traffic.
• Flow logs can capture traffic to the reserved IP address for the default VPC router.
• Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.
• Flow logs can capture real-time log streams for the network interfaces.

AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)

• Higher VPN throughput
• Web filtering
• OSPF over IPSec
• Advanced dynamic routing
• Secure SD-WAN with application visibility

A cloud administrator is tasked with protecting web applications hosted in AWS cloud.Which three Fortinet cloud offerings can the administrator choose from to accomplish the task? (Choose three.)

• AWS WAF
• FortiEDR
• FortiGate Cloud-Native Firewall (CNF)
• Fortinet Managed Rules for AWS WAF
• FortiWeb Cloud

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.Which action would allow the EIP assignment to be successful?

• Create and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• Shut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.
• Create and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.
• Create and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.

An organization has the requirement to connect a data VPC to the on-premises infrastructure of a branch office in a hybrid cloud environment. The connectivity needs the higher bandwidth but the organization does not want to use multiple connections between sites.Which AWS solution meets the requirement?

• Transit VPC with IPSec
• Internet Gateway
• Transit Gateway multicast
• Transit Gateway Connect

A customer has implemented GWLB between the partner and application VPCs. FortiGate appliances are deployed in the partner VPC with multiple AZs to inspect traffic transparently.Which two things will happen to application traffic based on the GWLB deployment? (Choose two.)

• Inbound and outbound traffic will go to multiple devices, which will perform load balancing.
• Inbound and outbound traffic will go to the same device, which will perform stateful processing.
• The content of the original traffic exchanged between the GWLB and FortiGate will be preserved.
• The original traffic exchanged between the GWLB and FortiGate will be hashed for data integrity.

An administrator is adding a web application to be protected by FortiWeb Cloud. Which two steps are necessary to successfully onboard the application? (Choose two.) An administrator is adding a web application to be protected by FortiWeb Cloud.Which two steps are necessary to successfully onboard the application? (Choose two.)

• Wait for the EC2 instance to be created.
• Provide a web application name.
• Create DNS records in the domain server that hosts the application.
• Enable a content delivery network (CDN) in the same region where your application is located.

Which two statements about the FortiCloud portal are true? (Choose two.)

• You can gain remote access to your FortiGate VM directly from the portal.
• To assign permissions in the identity and access management (JAM) portal, you must write a JSON script.
• You can access the FortiFlex portal only after you purchase a FortiFlex license and register it on FortiCare.
• You can access only cloud services that you have subscribed to on AWS marketplace.

What is a drawback of deploying a FortiWeb VM inside a virtual public cloud (VPC) compared to FortiWeb Cloud?

• It is unable to support web applications from OWASP Top 10 threats.
• It does not support zero-day protection.
• It is slower than FortiWeb Cloud to apply advanced WAF protection.
• Only applications going through the VPC are protected.