Get Fortinet FCP_ZCS_AD-7.4 Exam Practice Questions - Real and Updated

Answer : C

The trace output shows only one hop to reach 10.0.2.4, indicating that the destination is in the same Azure virtual network (VNet) as the Windows VM. Since the VM's IP is 10.0.1.4 and the destination is 10.0.2.4, they are in different subnets, but Azure allows direct routing between subnets within the same VNet without additional hops.

Answer : A, B

The debug output shows that the UbuntuServer address object successfully resolved an IP, while the webServer did not. The most likely cause is a mismatch in the dynamic address filter or missing tags on the target VM.

Verify the filter used for the dynamic firewall address -- The filter category=windows may not match any VM metadata, resulting in no matched addresses.

Verify the tags on the target VM -- Ensure that the VM has the correct tags (e.g., category=windows) that match the dynamic address filter to enable resolution.

Answer : D

Enabling the IP forwarding setting on FortiGate (or any NVA) in Azure allows the VM to route traffic that is not destined for itself, effectively enabling it to act as a router or firewall. This is essential for scenarios where FortiGate inspects or filters traffic between subnets or from on-premises to Azure.

Answer : A

Azure does not allow the deployment of virtual machines (VMs) in a gateway subnet. The gateway subnet is specifically reserved for Azure VPN Gateway or ExpressRoute Gateway instances, and deploying other resources in it can cause gateway deployment or operation failures.

Answer : A, C

In a FortiGate active-active HA deployment in Azure, synchronization between instances is achieved using: