Which two statements about the Amazon Cloud Services (AWS) network access control lists (ACLs) are true?
(Choose two.)

• A.Network ACLs are stateless, and inbound and outbound rules are used for traffic filtering.
• B.Network ACLs are stateful, and inbound and outbound rules are used for traffic filtering.
• C.Network ACLs must be manually applied to virtual network interfaces.
• D.Network ACLs support allow rules and deny rules.

Comment: *

Name: *

Email: *

Verification: *

Your company deploys FortiGate VM devices in high availability (HA) (active-active) mode with Microsoft Azure load balancers using the Microsoft Azure ARM template. Your senior administrator instructs you to connect to one of the FortiGate devices and configure the necessary firewall rules. However, you are not sure now to obtain the correct public IP address of the deployed FortiGate VM and identify the access ports.
How do you obtain the public IP address of the FortiGate VM and identify the correct ports to access the device?

• A.In the configured load balancer, access the health probes section.
• B.In the configured load balancer, access the inbound NAT rules section.
• C.In the configured load balancer, access the backend pools section.
• D.In the configured load balancer, access the inbound and outbound NAT rules section.

Comment: *

Name: *

Email: *

Verification: *

An organization deployed a FortiGate-VM in the Google Cloud Platform and initially configured it with two vNICs. Now, the same organization wants to add additional vNICs to this existing FortiGate-VM to support different workloads in their environment.
How can they do this?

• A.They can create additional vNICs using the Cloud Shell.
• B.They cannot create and add additional vNICs to an existing FortiGate-VM.
• C.They can create additional vNICs in the UI console.
• D.They can use the Compute Engine API Explorer.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. The exhibit shows a topology where multiple connections from clients to the same FortiGate-VM instance, regardless of the protocol being used, are required.
Which two statements are correct? (Choose two.)

• A.The Cloud Load Balancer Session Affinity setting should use the default value.
• B.The design shows an active-passive FortiGate-VM architecture.
• C.The Cloud Load Balancer Session Affinity setting should be changed to CLIENT_IP.
• D.The design shows an active-active FortiGate-VM architecture.

Comment: *

Name: *

Email: *

Verification: *