Online Access Free NSE6_WCS-7.0 Exam Questions

A global organization with cloud networks deployed in several AWS regions wants to set up next-generation firewall (NGFW) protection using FortiGate Cloud-Native Firewall (CNF).
What are two deployment considerations for the organization? (Choose two.)

• A.A CNF instance is required for each AWS region that must be protected.
• B.More than one AWS account can be associated with a CNF instance.
• C.Only one CNF instance is required to protect all AWS regions.
• D.They must choose AWS Firewall Manager to provision a CNF instance.

Refer to the exhibit.

An organization deployed the application servers in the AWS VPC that connects to the corporate data center using Transit Gateway Connect. Demand for the applications has grown and the connection requires more bandwidth.
What is required to achieve higher bandwidth?

• A.Use routable public IP addresses instead of private IP addresses for connectivity.
• B.No configuration change is required because GRE tunnels are scaled to provide higher bandwidth.
• C.You add a Transit VPC between the organization's VPCs.
• D.You cannot increase bandwidth the connection has a fixed limit.

Refer to the exhibit.

You deployed an active-passive FortiGate HA cluster using a CloudFormation template on an existing VPC.
Now you want to test active-passive FortiGate HA failover by running a debug so you can see the API calls to change the Elastic and secondary IP addresses.
Which statement is correct about the output of the debug?

• A.The routing table for Fgt2 updated successfully, and port2 will provide internet access to Fgt2.
• B.The Elastic IP is associated with port1 of Fgt2.
• C.IP address 10.0.0.13 is now associated with eni-0b61d8afc0aefb8a2.
• D.The Elastic IP is associated with port2 of Fgt2, and the secondary IP address for port1 and port2 was updated successfully.

An administrator wants to deploy a solution to automatically create firewall rules on FortiGate to accelerate time-to-protection for threats.
Which AWS service can be integrated with FortiGate to accomplish this?

• A.AWS Firewall Manager
• B.AWS network access control list
• C.AWS GuardDuty
• D.SDN Connector for AWS

Your customers have been reporting slow response times when accessing your web application.
What are two possible ways to increase response times from web servers protected by FortiWeb Cloud?
(Choose two.)
Your customers have been reporting slow response times when accessing your web application.
What are two possible ways to increase response times from web servers protected by FortiWeb Cloud?
(Choose two.)

• A.Disable WAF functionality.
• B.Enable a content delivery network
• C.Deploy FortiWeb Cloud in the same region where your web application is being hosted.
• D.Modify DNS entries to directly point to your web server.