Exam FCP_ZCS-AD-7.4 topic 1 question 4 discussion

Actual exam question from Fortinet's FCP_ZCS-AD-7.4

Question #: 4
Topic #: 1

Refer to the exhibit.

You are troubleshooting a network connectivity issue between two VMs that are deployed in Azure.
One VM is a FortiGate that has one interface in the DMZ subnet, which is in the Production VNet. The other VM is a Windows Server in the Servers subnet, which is also in the Production VNet. You cannot ping the Windows Server from the FortiGate VM.
What is the reason for this?

A. You have not created a VPN to allow traffic between those subnets
B. By default, Azure does not allow ICMP traffic between subnets
C. The firewall in the Windows VM is blocking the traffic
D. You have not configured a user-defined route for this traffic

Show Suggested Answer

Suggested Answer: C 🗳️

by zufyozirke at April 18, 2025, 2:10 p.m.

Comments

Submit Cancel

zufyozirke

2 weeks, 1 day ago

Selected Answer: C

Since both VMs live in the same VNet, Azure automatically handles inter‑subnet routing (no VPN or UDR needed) and NSGs allow VNet traffic—including ICMP—by default. The only thing left is the OS firewall on the Windows box, which by default blocks ping. Answer: C

upvoted 1 times

...

Exam FCP_ZCS-AD-7.4 All Questions

View all questions & answers for the FCP_ZCS-AD-7.4 exam

Exam FCP_ZCS-AD-7.4 topic 1 question 4 discussion

Comments

zufyozirke

SY0-701