Free Fortinet FCP_ZCS_AD-7.4 Exam Questions

Question 1

Refer to the exhibits.A high availability (HA) active-active FortiGate with Elastic Load Balancing (ELB) and Internal Load Balancing (ILB) was deployed with a default setup to filter traffic to a Linux server running Apache server. Ports 80 and 22 are open on the Linux server, and on FortiGate a VIP and firewall policy are configured to allow traffic through ports 80 and 22. Traffic on port 80 is successful, but traffic on port 22 is not detected by FortiGate. What configuration changes could you perform to allow SSH traffic?

A : Configure a customized port under the Frontend IP configuration

B : Add a new Azure load balancing rule

C : Include the Linux server in the back-end pool options

D : Add a new Inbound NAT rule

Answer: D

Question 2

Refer to the exhibits.A high availability (HA) active-active FortiGate with Elastic Load Balancing (ELB) and Internal Load Balancing (ILB) was deployed with a default setup to filter traffic to a Linux server running Apache server. Ports 80 and 22 are open on the Linux server, and on FortiGate a VIP and firewall policy are configured to allow traffic through ports 80 and 22. Traffic on port 80 is successful, but traffic on port 22 is not detected by FortiGate. What configuration changes could you perform to allow SSH traffic?

A : Configure a customized port under the Frontend IP configuration

B : Add a new Azure load balancing rule

C : Include the Linux server in the back-end pool options

D : Add a new Inbound NAT rule

Answer: D

Question 3

Why would you use a user-defined route in Azure?

A : To manage user authentication and access control

B : To have the traffic from the other VMs inspected by FortiGate

C : To allow inbound management access to FortiGate VMs

D : To allow communication between FortiGate VMs on two subnets in the same VNET

Answer: B

Question 4

What is a key distinction between Azure Firewall and FortiGate VM in terms of their primary functions?

A : Azure Firewall is a cloud-native network security service, while FortiGate VM is a network virtual appliance (NVA) that provides comprehensive security functions.

B : Azure Firewall focuses on network traffic inspection, while FortiGate VM is primarily a web application firewall.

C : Azure Firewall is designed exclusively for application layer filtering, while FortiGate VM is suitable for both on-premises and cloud environments.

D : Azure Firewall and FortiGate VM have identical primary functions, and no features differentiation.

Answer: A

Question 5