Refer to the exhibit. Which two conditions will enable you to segregate and secure the traffic between the hub and the spokes in Microsoft Azure? (Choose two.)

• A.Configure VNet peering between the hub and spokes.
• B.Configure VNet peering between the spokes only.
• C.Implement the FortiGate-VM network virtual appliance (NVA) in the hub and use user-defined routes (UDRs) in the spokes.
• D.Use ExpressRoute to interconnect the hub VNets and spoke VNets.

Comment: *

Name: *

Email: *

Verification: *

Which three properties are configurable Microsoft Azure network security group rule settings? (Choose three.)

• A.Sequence number
• B.Source port ranges
• C.Action
• D.Destination port ranges
• E.Source and destination IP ranges

Comment: *

Name: *

Email: *

Verification: *

Which two statements about the Amazon Cloud Services (AWS) network access control lists (ACLs) are true?
(Choose two.)

• A.Network ACLs are stateless, and inbound and outbound rules are used for traffic filtering.
• B.Network ACLs are stateful, and inbound and outbound rules are used for traffic filtering.
• C.Network ACLs must be manually applied to virtual network interfaces.
• D.Network ACLs support allow rules and deny rules.

Comment: *

Name: *

Email: *

Verification: *

You have been tasked with deploying FortiGate VMs in a highly available topology on the Amazon Web Services (AWS) cloud. The requirements for your deployment are as follows:
* You must deploy two FortiGate VMs in a single virtual private cloud (VPC), with an external elastic load balancer which will distribute ingress traffic from the internet to both FortiGate VMs in an active-active topology.
* Each FortiGate VM must have two elastic network interfaces: one will connect to a public subnet and other will connect to a private subnet.
* To maintain high availability, you must deploy the FortiGate VMs in two different availability zones.
How many public and private subnets will you need to configure within the VPC?

• A.One public subnet and two private subnets
• B.One public subnet and one private subnet
• C.Two public subnets and two private subnets
• D.Two public subnets and one private subnet

Comment: *

Name: *

Email: *

Verification: *

An Amazon Web Services (AWS) auto-scale FortiGate cluster has just experienced a scale-down event, terminating a FortiGate in availability zone C.
This has now black-holed the private subnet in this availability zone.
What action will the worker node automatically perform to restore access to the black-holed subnet?

• A.The worker node applies a route table from a non-black-holed subnet to the black-holed subnet.
• B.The worker node moves the virtual IP of the terminated FortiGate to a running FortiGate on the worker node's private subnet interface.
• C.The worker node modifies the route table applied to the black-holed subnet changing its default route to point to a running FortiGate on the worker node's private subnet interface.
• D.The worker node migrates the subnet to a different availability zone.

Comment: *

Name: *

Email: *

Verification: *