Your organization is deciding between deploying an active-active (A-A) or active-passive (A-P) FortiGate high availability (HA) cluster in AWS cloud.
Which two statements are true about A-A clusters compared to A-P clusters? (Choose two.)

• A.For A-A clusters, FortiGate must perform SNAT inbound to ensure symmetric traffic flow.
• B.A-A clusters rely on API calls for sfailovers.
• C.A-A clusters always require a load balancer.
• D.A-A clusters can use a software-defined network (SDN) to perform a failover.

Comment: *

Name: *

Email: *

Verification: *

An MSSP deployed 16 FortiGate VMS With the default AWS security groups and network access lists using an on-demand license from Amazon Web Services (AWS) Marketplace. They are using a third- party configuration backup application to back up and track changes for the FortiGate configurations. It can connect to the FortiGatedevices using only the SSH protocol, A customer is using the correct username and password configured on the FortiGate devices. but they are unable to log in using the SSH protocol.
What can be the reason Why this authentication is failing?

• A.The default AWS network access list for FortiGate does not allow SSH.
• B.AWS uses non-standard SSH port1025, and the default AWS security groups and NACL for FortiGate are not configured for the port.
• C.The AWS key is required to log in to FortiGate using SSH
• D.The default AWS Security group for FortiGate does not allow SSH.

Comment: *

Name: *

Email: *

Verification: *

Which three statements are correct about VPC flow logs? (Choose three.)

• A.Flow logs do not capture traffic to and from 169.254.169.254 for instance metadata.
• B.Flow logs do not capture DHCP traffic.
• C.Flow logs can capture traffic to the reserved IP address for the default VPC router.
• D.Flow logs can be used as a security tool to monitor the traffic that is reaching the instance.
• E.Flow logs can capture real-time log streams for the network interfaces.

Comment: *

Name: *

Email: *

Verification: *

Which AWS product integrates With FortiGate to automate security remediation for workloads running on the AWS platform?

• A.AWS Protector
• B.AWS Inspector
• C.AWS Shield
• D.AWS GuardDuty

Comment: *

Name: *

Email: *

Verification: *

You are troubleshooting network connectivity issues between two VMs deployed in AWS.
One VM is a FortiGate located on subnet "LAN" that is part of the VPC "Encryption". The other VM is a Windows server located on the subnet "servers" which is also in the "Encryption" VPC. You are unable to ping the Windows server from FortiGate.
What are two reasons for this? (Choose two.)

• A.The firewall in the Windows VM is blocking the traffic.
• B.The default AWS Network Access Control List (NACL) does not allow this traffic.
• C.By default, AWS does not allow ICMP traffic between subnets.
• D.Add an inbound allow ICMP rule in the security group attached to the windows server.

Comment: *

Name: *

Email: *

Verification: *