Exam FCP_ZCS-AD-7.4 topic 1 question 10 discussion

Actual exam question from Fortinet's FCP_ZCS-AD-7.4

Question #: 10
Topic #: 1

Refer to the exhibits.

A high availability (HA) active-active FortiGate with Elastic Load Balancing (ELB) and Internal Load Balancing (ILB) was deployed with a default setup to filter traffic to a Linux server running Apache server.
Ports 80 and 22 are open on the Linux server, and on FortiGate a VIP and firewall policy are configured to allow traffic through ports 80 and 22. Traffic on port 80 is successful, but traffic on port 22 is not detected by FortiGate.
What configuration changes could you perform to allow SSH traffic?

A. Configure a customized port under the Frontend IP configuration
B. Add a new Azure load balancing rule
C. Include the Linux server in the back-end pool options
D. Add a new Inbound NAT rule

Show Suggested Answer

Suggested Answer: D 🗳️

by zufyozirke at April 23, 2025, 3:46 a.m.

Comments

Submit Cancel

Powers22

1 month, 2 weeks ago

Selected Answer: B

Azure Load Balancer does not directly support defining a port range within a single load balancing rule. Instead, you need to create individual rules for each port you want to forward. For example, if you need to forward traffic for ports 65520 to 65530, you would need to create 11 separate load balancing rules. Inbound NAT rules are generally used to map destination ports to specific VMs in the backend pool rather than listening on additional ports.

upvoted 2 times

...

zufyozirke

2 months, 3 weeks ago

Selected Answer: B,C

B and C are the answers

upvoted 1 times

...