Cloud

Customer XYZ has an ExpressRoute connection from Microsoft Azure to a data center. they want to secure communication over ExpressRoute and to install an in-line fortigate to perform intrusion prevention system (IPS) and antivirus scannig

• install fortigatein azure and build a vpn tunnel to the data center over expressRoute

• configure a user defined route table

• enable the redirect option in expressroute to send data center traffic to user defined route table

• configure the gateway subnet as the subnet in the user-defined route table

• define a default route where the next hop ip is the fortigate wan interface

which two statements about the amazon cloud services (AWS) network access control list (ACLS) are true?(choose two)

• network ACLS are stateless and inbound and outbound rules are used for traffic filtering

• network ACLS are stateful and inbound and outbound rules are used for traffic filtering

• network ACLS must be manually applied to virtual network interfaces

• network ACLS support allow rules and deny rules

which three properties are configurable microsoft azure network security group rule settings? Choose three

• Action

• Sequence number

• source and destination ip ranges

• destination port ranges

• source port ranges

refer to the exhibit you attempted to deploy the fortigate VM in Microsoft azure with the JSON template, and it failed to boot up. the exhibit shows an excerpt the JSON template. What is incorrect with the template

• the LUN ID is not defined

• Fortigate VM does not support managed DISK from Azure

• the caching parameter should be none

• the create options parameter should be fromImage

refer to th exhibit you are configuring an active passive fortigate clustering protocol FGCP HA configuration in a single availability zone in amazon web services AWS using a cloud formation template. after deploying the template you notice that the AWS console has ip information listed in the fortigate VM firewalls in the HA configuration however within the configuration of FortiOS you notice that port1 is using anip of 10.0.013 and port2 is using an ip of 10.0.1..13

• configure fortios to use static ip addresses with the ip addresses reflected in the ENI primary IP address configuration (as per the exhibit)

• Delete the deployment and start again you have in put the wrong parameters during the cloud formation template deployment

• configure fortios to use DHCP so that it will get the correct IP adresses on the ports

• nothing in AWS cloud it is normal for a fortigate ENI primary ip address to be different that the fortios IP address configuation

refer to the exhibit which two conditions will enable you to segregate and secure the traffic between the hub and the spokes in Microsft Azure? Choose two

• implement the fortigate VM network virtual appliance NVA in the hub and use user defined toutes UDRs in the spokes

• use ExpressRoute to interconnect the hub VNets and spoke VNets

• configure Vnet peering between the spokes only

• configure Vnet peering between the hub and spokes

refer to th exhibit consider an active-passive HA deployment in microsoft azure the exhibit shows an excerpt from the passive fortigateVM node if the active fortigate VM fails what are the results of the API calls made by the fortigate named SSTENTAZFGT-0302 choose two

• SSTENTAZFGT-03-FloatingPIP is assingned to the ip configuration with the same SSTENTAZFGT-0302-NIC-01 under the network interface SSTENTAZFGT-0302-NIC-01

• 172.29.32.71 is set as next hop IP for all routes under fortigateUDR-01

• the network interface of the active unit moves to itself

• SSTENTAZFGT-03-FloatingPIP public ip is a assigned to NIC SSTENTAZFGT-0302-NIC-01

which statement about fortisandbox in amazon web services (AWS) is true?

• in AWS virtual machines VMS that inspect files do not have to be reset after inspecting a file

• fortisandbox in AWS uses windows virtual machine VMs to inspect files

• In AWS virtual machines VMs that inspect files are constantly up and running

• fortisandbox in AWS can have a maximu of eigth virtual machines VMs that inspect

what is the bandwidth ilimitation of an amazon web services AWS transit gateway VPC attachment?

• up to 1.25 Gbps per attachement

• up to 50 Gbps per attachement

• up to 10 Gbps per attachement

• up to 1 Gbps per attachement

an organization deploys a fortigate-VM in amazon web services AWS and configures two elastic network interfaces ENIS now the same organization wants to add additional ENIS to support different workloads in their enviroment.

Which action can you take to accomplish this?

• none you cannot create and additional ENis to an existing Fortigate-VM

• create the ENi shut down fortigate attach the ENI to fortigate an then start fortigate

• create the ENI attach it to fortigate and then restart fortigate

• create the ENI and attach it to fortigate