FCP_ZCS-AD-7.4 Practice Test

FCP_ZCS-AD-7.4 Practice Test practice questions, page 2 of 3, with answer review and explanations.

Question 6

Refer to the exhibit. The exhibit shows some of the properties of a virtual NIC that is used by a FortiGate VM deployed in Azure. The virtual NIC shown is connected to a subnet (10.0.1.0/26) with several VMs that will be accessing the internet through the FortiGate VM. Which statement is true for this scenario?

  1. The NIC in the exhibit needs to be assigned a public IP address.
  2. The VMs in the 10.0.1.0/26 subnet can access the internet through FortiGate.
  3. You must change the default gateway on the VMs in the Internal Subnet for this to work.
  4. The parameters of the virtual NIC are not configured correctly.

Question 7

Refer to the exhibits. You are configuring an SDN connector for Azure on a FortiGate device You completed all the required steps on the Azure side. While configuring the FortiGate side, you notice that you did not save the client secret used in the Azure App Registration. What is the quickest way to obtain the value of the client secret?

  1. Create a new resource group
  2. Create a new client secret
  3. Create a new app registration
  4. Create a new external connector for Azure

Question 8

Your organization is in the process of optimizing its Azure network architecture and wants to dynamically manage and exchange routing information between its virtual networks and on-premises networks. Which Azure service would help to provide a centralized point for efficient route management and dynamic routing?

  1. Azure Virtual WAN
  2. Azure VPN Gateway
  3. Azure ExpressRoute
  4. Azure Route Server

Question 9

A Linux server was deployed in a protected subnet with a dynamic IP address. A FortiGate VM in the internal subnet provides traffic filtering to it. and you must implement a firewall policy using the IP address of the Linux server. Which feature could help integrate FortiGate using Linux server tags?

  1. Targets Management
  2. Microsoft Entra ID
  3. Software-defined network (SDN) connector
  4. Service Fabric Cluster

Question 10

Refer to the exhibits. A high availability (HA) active-active FortiGate with Elastic Load Balancing (ELB) and Internal Load Balancing (ILB) was deployed with a default setup to filter traffic to a Linux server running Apache server. Ports 80 and 22 are open on the Linux server, and on FortiGate a VIP and firewall policy are configured to allow traffic through ports 80 and 22. Traffic on port 80 is successful, but traffic on port 22 is not detected by FortiGate. What configuration changes could you perform to allow SSH traffic?

  1. Configure a customized port under the Frontend IP configuration
  2. Add a new Azure load balancing rule
  3. Include the Linux server in the back-end pool options
  4. Add a new Inbound NAT rule