NSE 7 – Public Cloud Security 6.4 — Question 18

You have been tasked with deploying FortiGate VMs in a highly available topology on the Amazon Web Services (AWS) cloud. The requirements for your deployment are as follows:
* You must deploy two FortiGate VMs in a single virtual private cloud (VPC), with an external elastic load balancer which will distribute ingress traffic from the internet to both FortiGate VMs in an active-active topology.
* Each FortiGate VM must have two elastic network interfaces: one will connect to a public subnet and other will connect to a private subnet.
* To maintain high availability, you must deploy the FortiGate VMs in two different availability zones.
How many public and private subnets will you need to configure within the VPC?

Answer options

• A. One public subnet and two private subnets
• B. Two public subnets and one private subnet
• C. Two public subnets and two private subnets
• D. One public subnet and one private subnet

Correct answer: C

Explanation

The correct answer is C because each FortiGate VM requires one public subnet and one private subnet for its two elastic network interfaces. Since there are two FortiGate VMs and they need to be deployed in separate availability zones, this results in a total of two public subnets and two private subnets to ensure proper traffic distribution and high availability. The other options do not meet the requirements for the deployment configuration.