FCP_ZCS_AD-7.4 試験問題を無料オンラインアクセス

Why would an organization use Azure Route Server in a hybrid cloud scenario?
Response:

• A.To provide faster access to cloud resources
• B.To manage routing between Azure and on-premises environments
• C.To enhance the security of on-premises devices
• D.To ensure data compliance across borders

Refer to the exhibit.

You are troubleshooting a network connectivity issue between two VMs that are deployed in Azure.
One VM is a FortiGate that has one interface in the DMZ subnet, which is in the Production VNet. The other VM is a Windows Server in the Servers subnet, which is also in the Production VNet. You cannot ping the Windows Server from the FortiGate VM.
What is the reason for this?

• A.You have not created a VPN to allow traffic between those subnets
• B.You have not configured a user-defined route for this traffic
• C.The firewall in the Windows VM is blocking the traffic
• D.By default, Azure does not allow ICMP traffic between subnets

A Linux server was deployed in a protected subnet with a dynamic IP address. A FortiGate VM in the internal subnet provides traffic filtering to it. and you must implement a firewall policy using the IP address of the Linux server.
Which feature could help integrate FortiGate using Linux server tags?

• A.Service Fabric Cluster
• B.Software-defined network (SDN) connector
• C.Microsoft Entra ID
• D.Targets Management

What is the purpose of Azure Application Gateway in the context of application security?
Response:

• A.To provide SSL termination
• B.To route traffic based on source IP address
• C.To manage API calls across multiple platforms
• D.To serve as a cloud-based firewall

After integrating a FortiGate VM with Azure Route Server, you detect that routes are not propagating successfully.
What initial step could you perform to diagnose the root cause?

• A.Verify that the FortiGate VM is running the latest firmware version
• B.Verify the BGP peering status on both the FortiGate VM and Azure Route Server
• C.Monitor the network latency between the FortiGate VM and Azure Route Server to identify potential communication delays affecting route propagation
• D.Examine the Azure Microsoft Entra ID permissions associated with the FortiGate VM to ensure that correct authentication is being used for BGP peering