FCP_ZCS_AD-7.4 Exam Dumps : FCP - Azure Cloud Security 7.4 Administrator

The first and most direct diagnostic step is to verify the BGP peering status on both the FortiGate VM and Azure Route Server. If BGP peering is not established or is in an idle or down state, route propagation will fail. This check confirms whether the two systems are communicating and exchanging routes as expected.

The branch-to-hub to hub-to-branch topology in Azure Virtual WAN enables efficient branch-to-branch communication by routing traffic through connected hubs. This improves data transfer speed and reliability between branches without needing direct connections between all sites, simplifying management while maintaining performance.

The FortiGate VM and the Windows Server VM are in different subnets but within the same Production virtual network, which means they can communicate by default unless restricted. Azure allows ICMP between subnets, but Windows VMs have ICMP blocked by default in their firewall settings. Therefore, the likely reason for the ping failure is that the Windows Server’s firewall is blocking ICMP (ping) traffic.