Which three statements are correct about VPC flow logs? (Choose three.)

• A.Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.
• B.Flow logs do not capture DHCP traffic.
• C.Flow logs can capture traffic to the reserved IP address for the default VPC router.
• D.Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.
• E.Flow logs can capture real-time log streams for the network interfaces.

Comment: *

Name: *

Email: *

Verification: *

AWS native network services offer vast functionality and inter-connectivity between the cloud and on-premises networks.
Which three additional functions can FortiGate for AWS offer to complement the native services offered by AWS? (Choose three.)

• A.Higher VPN throughput
• B.Web filtering
• C.OSPF over IPSec
• D.Advanced dynamic routing
• E.Secure SD-WAN with application visibility

Comment: *

Name: *

Email: *

Verification: *

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.
The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.
Which action would allow the EIP assignment to be successful?

• A.Create and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.
• B.Create and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• C.Create and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.
• D.Shut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.

Comment: *

Name: *

Email: *

Verification: *

An administrator is adding a web application to be protected by FortiWeb Cloud.
Which two steps are necessary to successfully onboard the application? (Choose two.) An administrator is adding a web application to be protected by FortiWeb Cloud.
Which two steps are necessary to successfully onboard the application? (Choose two.)

• A.Wait for the EC2 instance to be created.
• B.Provide a web application name.
• C.Create DNS records in the domain server that hosts the application.
• D.Enable a content delivery network (CDN) in the same region where your application is located.

Comment: *

Name: *

Email: *

Verification: *

An AWS administrator is designing internet connectivity for an organization's virtual public cloud (VPC). The organization has web servers with private addresses that must be reachable from the internet. The web servers must be highly available.
Which two configurations can you use to ensure the web servers are highly available and reachable from the internet? (Choose two.)

• A.Deploy a network load balancer.
• B.Configure a network address translation (NAT) Gateway in your VPC. Place web servers behind the NAT Gateway.
• C.Add a route to the default virtual public cloud (VPC) route table forwarding all traffic to the internet gateway.
• D.Deploy web servers in multiple availability zones.

Comment: *

Name: *

Email: *

Verification: *