Fortinet Exam NSE6_WCS-7.0 Topic 1 Question 9 Discussion

Actual exam question for Fortinet's NSE6_WCS-7.0 exam

Question #: 9
Topic #: 1

An organization has created a VPC with two subnets and deployed a FortiGate-VM (VM04/c4.xlarge) in AWS.

The EC2 instance is initially configured with two Elastic Network Interfaces (ENIs). The primary ENI is configured on the public subnet, and the secondary ENI is configured on the private subnet. To provide internet access for the FortiGate-VM, they now want to associate an EIP to its primary ENI, but the assignment is failing.

Which action would allow the EIP assignment to be successful?

ACreate and associate a public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.

BShut down the FortiGate VM, if it is running, assign the EIP to the primary ENI, and then power it on.

CCreate and attach an internet gateway to the VPC, and then assign the EIP to the primary ENI of the FortiGate VM.

DCreate and attach a public routing table to the public subnet, associate the public subnet with the primary ENI of the FortiGate VM, and then assign the EIP to the primary ENI.

Show Suggested Answer

Suggested Answer: C

Internet Gateway Requirement:

For an Elastic IP (EIP) to be assigned to an instance's primary ENI, the VPC must have an Internet Gateway (IGW) attached. The IGW enables the VPC to communicate with the internet, allowing the EIP to function properly (Option C).

Process of Assigning EIP:

Once the Internet Gateway is attached to the VPC, the EIP can be successfully assigned to the primary ENI of the FortiGate VM, providing it with internet access.

Other Options Analysis:

Option A is incorrect because the primary ENI is already in a public subnet.

Option B is not necessary and may not solve the issue without an attached Internet Gateway.

Option D is partially correct about the routing table but does not address the primary issue of needing an Internet Gateway.

AWS Elastic IP Documentation: Elastic IP

AWS Internet Gateway: Internet Gateway

by Paz at Mar 09, 2025, 07:02 AM

Limited Time Offer

25%

17 days ago

I'd go with C. Attaching an internet gateway seems like the logical step to enable internet access for the FortiGate-VM.

upvoted 0 times

Lindsey

2 days ago

Yeah, I agree. It makes sense to enable internet access by attaching an internet gateway.

upvoted 0 times

...

Nana

7 days ago

I think C is the right choice. Attaching an internet gateway should solve the issue.

upvoted 0 times

...