Exam NSE7_PBC-6.4 topic 1 question 5 discussion

It can't be B now because the filter for the tag is not correct. It should be this format: tag.<key>=<value> and on the screenshot there's a dash.

They have updated the exam to reflect -1 -- "Run diagnose debug application azd -1 on FortiGate." Although I am still not sure this would be the correct answer.

Answer must be A, probably a typo from the dump. Will come back and update after passing the certification if I have the question. If not, should be B

B is correct The answer A is incorrect because has a typo "l", The right command is "-1" not "l" diagnose debug application azd -1 https://docs.fortinet.com/document/fortigate-public-cloud/6.2.0/azure-administration-guide/985498/troubleshooting-azure-fabric-connector

B. In the Microsoft Azure portal, set the correct tag values for the windows server. A not resolving the issue,just debugging the API communication between fw and azure graph D. Meaning nothing ( its cannot resolve the problem) C. Wrong way to the solution

"A" is the correct answer. You must solve the problem in the right way and through the right analysis. The purpose is that the connector receives the information dynamically and if the synchronization is failing, the analyst must correct the problem so that the information is correctly synchronized with the environment. https://docs.fortinet.com/document/fortigate-public-cloud/6.0.0/configuring-fabric-connnector-for-fortigate-on-azure-stack/833052/troubleshooting

FortiOS_6.4_Azure_Administration_Guide.pdf You can use the diagnose sys sdn status command to view the status of your SDN connectors. You can check if API calls are made successfully by running the following commands in the CLI: diagnose debug enable diagnose debug application azd -1 I think is A

The answer is C as you cannot execute the command azd -l on the Fortigate firewall. Also this link indicate that the error is missing object in Azure AD - https://docs.fortinet.com/document/fortigate/6.2.0/new-features/432538/fsso-dynamic-address-subtype-6-2-2

Very tricky question, it is telling you that the object was configured successfully, however if we take option C, the address object will be added as static, and maybe i need it to be dynamic, because it may change, so option C would defeat the purpose of SDN Fabric Connector address, however option A seems more realistic, as i would do a debug to see where the problem is, however this would not fix the issue, but it will guide me in the right direction, hopefully. So, option C it is the temporary fix and A would look much realistic.

A is incorret, the debug command will only show the error not resolve the issue. B is incorrect, the admin has setup it with suecess D is incorrect, as the type should be Fabric Connectoraddress C seems the correct answer

C. In the Microsoft Azure portal, access the windows server, obtain the private IP address, and assign the IP address under the FortiGate-VM AzureLab address object.