FCP_ZCS_AD-7.4 Exam Dumps : FCP - Azure Cloud Security 7.4 Administrator

Azure ExpressRoute provides dedicated private connections between on-premises infrastructure and Azure data centers, bypassing the public internet. This results in more predictable latency, higher reliability, and better security, making it ideal for mission-critical workloads.

The FortiGate VM and the Windows Server VM are in different subnets but within the same Production virtual network, which means they can communicate by default unless restricted. Azure allows ICMP between subnets, but Windows VMs have ICMP blocked by default in their firewall settings. Therefore, the likely reason for the ping failure is that the Windows Server’s firewall is blocking ICMP (ping) traffic.

The first and most direct diagnostic step is to verify the BGP peering status on both the FortiGate VM and Azure Route Server. If BGP peering is not established or is in an idle or down state, route propagation will fail. This check confirms whether the two systems are communicating and exchanging routes as expected.