Refer to the exhibit.

Which two conditions will enable you to segregate and secure the traffic between the hub and the spokes in Microsoft Azure? (Choose two.)

• A.Configure VNet peering between the spokes only.
• B.Use ExpressRoute to interconnect the hub VNets and spoke VNets.
• C.Configure VNet peering between the hub and spokes.
• D.Implement the FortiGate-VM network virtual appliance (NVA) in the hub and use user-defined routes (UDRs) in the spokes.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

A customer has deployed an environment in Amazon Web Services (AWS) and is now trying to send outbound traffic from the Web servers to the Internet. The FortiGate policies are configured to allow all outbound traffic; however, the traffic is not reaching the FortiGate internal interface.
What are two possible reasons for this behavior? (Choose two.)

• A.The web servers are not configured with the default gateway.
• B.The Internet gateway (IGW) is not added to VPC (virtual private cloud).
• C.AWS source and destination checks are enabled on the FortiGate interfaces.
• D.AWS security groups may be blocking the traffic.

Comment: *

Name: *

Email: *

Verification: *

An Amazon Web Services (AWS) auto-scale FortiGate cluster has just experienced a scale-down event, terminating a FortiGate in availability zone C.
This has now black-holed the private subnet in this availability zone.
What action will the worker node automatically perform to restore access to the black-holed subnet?

• A.The worker node moves the virtual IP of the terminated FortiGate to a running FortiGate on the worker node's private subnet interface.
• B.The worker node migrates the subnet to a different availability zone.
• C.The worker node modifies the route table applied to the black-holed subnet changing its default route to point to a running FortiGate on the worker node's private subnet interface.
• D.The worker node applies a route table from a non-black-holed subnet to the black-holed subnet.

Comment: *

Name: *

Email: *

Verification: *

Which statement about FortiSandbox in Amazon Web Services (AWS) is true?

• A.FortiSandbox in AWS uses Windows virtual machines (VMs) to inspect files.
• B.In AWS, virtual machines (VMs) that inspect files do not have to be reset after inspecting a file.
• C.In AWS, virtual machines (VMs) that inspect files are constantly up and running.
• D.FortiSandbox in AWS can have a maximum of eight virtual machines (VMs) that inspect files.

Comment: *

Name: *

Email: *

Verification: *

Which three properties are configurable Microsoft Azure network security group rule settings? (Choose three.)

• A.Action
• B.Sequence number
• C.Source and destination IP ranges
• D.Destination port ranges
• E.Source port ranges

Comment: *

Name: *

Email: *

Verification: *