Your company deployed a FortiSandbox for AWS.
Which statement is correct about FortiSandbox for AWS?

• A.FortiSandbox for AWS comes as a hybrid solution. The FortiSandbox manager is installed on-premises and analyzes the results of the sandboxing process received from AWS EC2 instances.
• B.The FortiSandbox manager is installed on the AWS platform and analyzes the results of the sandboxing process received from on-premises Windows instances.
• C.FortiSandbox for AWS does not need more resources because it performs only management and analysis tasks.
• D.FortiSandbox deploys new EC2 instances with the custom Windows and Linux VMs, then it sends malware, runs it, and captures the results for analysis.

Comment: *

Name: *

Email: *

Verification: *

You need to deploy a new Windows server in AWS to offload web traffic from an existing web server in a different availability zone.
According to the AWS shared responsibility model, what three actions must you take to secure the new EC2 instance? (Choose three.)

• A.Update software on the instance.
• B.Change the existing elastic load balancer (ELB) to a gateway load balancer
• C.Configure security groups.
• D.Manage the operating system on the instance.
• E.Move all web servers into the same availability zone.

Comment: *

Name: *

Email: *

Verification: *

Your organization is deciding between deploying FortiWeb VM or Fortinet Managed Rules for AWS WAF.
What are two benefits of choosing FortiWeb VM? (Choose two.)

• A.Only pay for what is used.
• B.Up-to-date WAF signatures powered by FortiGuard.
• C.Zero-day protection.
• D.Advanced WAF functionality.

Comment: *

Name: *

Email: *

Verification: *

Which three statements correctly describe FortiGate Cloud-Native Firewall (CNF)? (Choose three.)

• A.It provides carrier-grade protection.
• B.It scales seamlessly.
• C.It uses AWS Elastic Load Balancing (ELB).
• D.It is considered to be a Firewall-as-a-Service (FWaaS).
• E.It can be managed by FortiManager and AWS firewall manager.

Comment: *

Name: *

Email: *

Verification: *

Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

• A.A-A clusters rely on API calls for sfailovers.
• B.A-A clusters can use a software-defined network (SDN) to perform a failover.
• C.For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
• D.A-A clusters always require a load balancer.

Comment: *

Name: *

Email: *

Verification: *