Free Fortinet FCP_ZCS-AD-7.4 Exam Dumps Questions & Answers

When you deploy a single FortiGate VM using the available template from the Azure Marketplace, several other resources are also created.
Which two resources, among others, are created during the process? (Choose two.)

• A.  One new route table
• B.  One NSG for each interface
• C.  One VM Scale set
• D.  Two virtual NICs

What is a limitation of the Network Security Groups (NSGs) in Azure?

• A.  NSGs allow the filtering of inbound traffic only.
• B.  NSGs operate at the application layer, limiting their effectiveness in the network layer.
• C.  NSGs cannot be applied to individual virtual machines.
• D.  NSGs are applied only to vNICs.

How does Azure ExpressRoute contribute to achieving predictable latency for network traffic?

• A.  By using public internet connections for enhanced routing flexibility
• B.  By prioritizing Azure ExpressRoute traffic over other network traffic
• C.  By relying on load balancing to dynamically optimize latency
• D.  By establishing dedicated private connections to Azure data centers

Refer to the exhibit.

An Azure Route Server and an active-passive FortiGate with Elastic Load Balancing (ELB) and Internal Load Balancing (ILB) have been deployed successfully and they are sharing and populating BGP routes in the Protected VNet.
A Linux server has been deployed in a new VNet spoke. It is expected that Azure Route Server should inject the FortiGate BGP routes into the Linux server but that failed.
How can you diagnose the problem?

• A.  Verify the BGP setup on Azure Route Server
• B.  Linux server doesn't support BGP negotiation with Azure Route Server
• C.  Review FortiGate BGP neighbors
• D.  Monitor effective routes on the Azure network interface (NIC) of the Linux server

Refer to the exhibit.

Your company runs front-end web servers in Azure. You need to deploy a Linux VM to be used as a web server.
To protect your web servers with a web application firewall (WAF), you deploy FortiWeb to secure applications from web-based attacks.
Which FortiWeb operation mode can you implement for this scenario?

• A.  Transparent inspection
• B.  Passive monitoring
• C.  True transparent proxy
• D.  Reverse proxy