View all questions & answers for the NSE 8 - Recertification Exam (813) Materials exam

NSE 8 - Recertification Exam (813) Materials - Question #23 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Refer to the exhibits. The exhibits show the configuration and debug output from a FortiGate Public SDN Connector. What is a possible reason for this dynamic address object to be empty? (Choose one answer)

  • A. Only Private IP is in the scope of the predefined Owner role.
  • B. The Application ID and Client secret are incorrect.
  • C. The App registration does not have a role with necessary read permissions on the resource group.
  • D. The Filter should be set to Category=Servers.
Correct Answer: C

Brave-Dump Community Votes

Answer: C (1 vote) 100%

Community Explanations & Comments (1)

Mohamed laamouri 10 months ago
Selected: C
"code":"AuthorizationFailed","message":"The client '40655e9e-...' with object id '40655e9e-...' does not have authorization to perform action 'Microsoft.Network/publicIPAddresses/read' over scope '/subscriptions/...'"

Ce message indique que l’authentification a réussi (le client est identifié par son ID), mais l’autorisation a échoué (pas de droits pour lire les IP publiques).
Si l’Application ID ou le Client Secret étaient incorrects, le message aurait été "Authentication failed" ou "Invalid client credentials", et le connecteur n’aurait même pas pu atteindre l’API Azure.