Which statement about FortiSandbox in Amazon Web Services (AWS) is true?

• A.FortiSandbox in AWS can have a maximum of eight virtual machines (VMs) that inspect files.
• B.FortiSandbox in AWS uses Windows virtual machines (VMs) to inspect files.
• C.In AWS, virtual machines (VMs) that inspect files do not have to be reset after inspecting a file.
• D.In AWS, virtual machines (VMs) that inspect files are constantly up and running.

Comment: *

Name: *

Email: *

Verification: *

Customer XYZ has an ExpressRoute connection from Microsoft Azure to a data center. They want to secure communication over ExpressRoute, and to install an in-line FortiGate to perform intrusion prevention system (IPS) and antivirus scanning.
Which three methods can the customer use to ensure that all traffic from the data center is sent through FortiGate over ExpressRoute? (Choose three.)

• A.Configure the gateway subnet as the subnet in the user-defined route table
• B.Configure a user-defined route table
• C.Enable the redirect option in ExpressRoute to send data center traffic to a user-defined route table
• D.Install FortiGate in Azure and build a VPN tunnel to the data center over ExpressRoute
• E.Define a default route where the next hop IP is the FortiGate WAN interface

Comment: *

Name: *

Email: *

Verification: *

Which two statements about the Amazon Cloud Services (AWS) network access control lists (ACLs) are true? (Choose two.)

• A.Network ACLs must be manually applied to virtual network interfaces.
• B.Network ACLs support allow rules and deny rules.
• C.Network ACLs are stateless, and inbound and outbound rules are used for traffic filtering.
• D.Network ACLs are stateful, and inbound and outbound rules are used for traffic filtering.

Comment: *

Name: *

Email: *

Verification: *

You have been tasked with deploying FortiGate VMs in a highly available topology on the Amazon Web Services (AWS) cloud. The requirements for your deployment are as follows:
* You must deploy two FortiGate VMs in a single virtual private cloud (VPC), with an external elastic load balancer which will distribute ingress traffic from the internet to both FortiGate VMs in an active-active topology.
* Each FortiGate VM must have two elastic network interfaces: one will connect to a public subnet and other will connect to a private subnet.
* To maintain high availability, you must deploy the FortiGate VMs in two different availability zones.
How many public and private subnets will you need to configure within the VPC?

• A.One public subnet and two private subnets
• B.Two public subnets and one private subnet
• C.One public subnet and one private subnet
• D.Two public subnets and two private subnets

Comment: *

Name: *

Email: *

Verification: *

You are deploying Amazon Web Services (AWS) GuardDuty to monitor malicious or unauthorized behaviors related to AWS resources. You will also use the Fortinet aws-lambda-guardduty script to translate feeds from AWS GuardDuty findings into a list of malicious IP addresses. FortiGate can then consume this list as an external threat feed.
Which Amazon AWS services must you subscribe to in order to use this feature?

• A.GuardDuty, CloudWatch, S3, and DynamoDB.
• B.Inspector, Shield, GuardDuty, S3, and DynamoDB.
• C.GuardDuty, CloudWatch, S3, Inspector, WAF, and Shield.
• D.WAF, Shield, GuardDuty, S3, and DynamoDB.

Comment: *

Name: *

Email: *

Verification: *