FCP_FAZ_AD-7.4 Exam Questions
184 real FCP_FAZ_AD-7.4 exam questions with expert-verified answers and explanations. Page 1 of 4.
- Question #1Device Registration and ADOMs
Which statement about the communication between FortiGate high availability (HA) clusters and FortiAnalyzer is true?
FortiGate HA clusterdevice registrationcluster communicationlog source - Question #2Troubleshooting and Maintenance
What is the best approach to handle a hard disk failure on a FortiAnalyzer that supports hardware RAID?
hardware RAIDdisk failurehot swapRAID recovery - Question #3Logging and Archiving
An administrator has configured the following settings: What is the purpose of executing these commands?
log integrityhash valueauthentication codelog verification - Question #4System Settings and High Availability
Which statement correctly describes RAID 10 (1+0) on FortiAnalyzer?
RAID 10disk capacitymirroringstriping - Question #5System Settings and High Availability
Refer to the exhibit, which shows the HA configuration settings of a FortiAnalyzer device. The administrator wants to join this FortiAnalyzer to an existing HA cluster. What can yo...
HA configurationfailover thresholdcluster joinpeer communication - Question #6System Settings and High Availability
Which two parameters impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)
reserved disk spaceRAID leveldisk sizestorage quota - Question #7FortiAnalyzer Initial Setup
Refer to the exhibit. The exhibit shows the creation of a new administrator on FortiAnalyzer. The new account uses the credentials stored on an LDAP server. Why would an administra...
LDAP authenticationadministrator accountfallback passwordauthentication server - Question #8Logging and Archiving
In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?
Security FabricNATtraffic logsupstream FortiGate - Question #9System Settings and High Availability
Which two statements about high availability (HA) on FortiAnalyzer are true? (Choose two.)
HA synchronizationactive-passiveVRRPoperating mode - Question #10Device Registration and ADOMs
Which two statements about deleting ADOMs are true? (Choose two.)
ADOM deletionregistered devicesADOM statusADOM management - Question #11Logging and Archiving
Refer to the exhibit. The capture displayed was taken on a FortiAnalyzer. Why is a single IP address shown as the source for all logs received?
Security Fabriclog source IProot FortiGatelog collection - Question #12Troubleshooting and Maintenance
What does the disk status Degraded mean for RAID management?
RAID statusdegraded diskmissing driveRAID management - Question #13Logging and Archiving
Which process is responsible for enforcing the log file size?
logfiledlog processeslog file sizedaemon responsibilities - Question #14FortiAnalyzer Initial Setup
Which two statements about FortiAnalyzer operating modes are true? (Choose two.)
collector modeanalyzer modeoperating modeslog offloading - Question #15Logging and Archiving
Which two statements regarding FortiAnalyzer log forwarding modes are true? (Choose two.)
log forwardingaggregation modereal-time forwardinglog encryption - Question #16Device Registration and ADOMs
You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize. Which two reasons can ca...
Security Fabric authorizationfabric authorizationFortiGate registrationconnectivity - Question #17System Settings and High Availability
Which two methods can you use to restrict administrative access on FortiAnalyzer? (Choose two.)
trusted hostsadministrator profilesaccess restrictionadmin management - Question #18Troubleshooting and Maintenance
Refer to the exhibit. Based on the output, what can you conclude about the FortiAnalyzer logging status?
logging statusconnection overloadlog queueFortiGate-FortiAnalyzer - Question #19
Which two statements regarding ADOM modes are true? (Choose two.)
- Question #20Troubleshooting and Maintenance
What is the purpose of the FortiAnalyzer command diagnose system print netstat?
netstatdiagnostic commandsnetwork statisticsactive connections - Question #21FortiAnalyzer Initial Setup
Refer to the exhibit. The exhibit shows the creation of a new administrator on FortiAnalyzer. What are two effects of enabling the choice Match all users on remote server when conf...
LDAP wildcard adminremote server authenticationadministrator creationMatch all users - Question #22Device Registration and ADOMs
The connection status of a new device on FortiAnalyzer is listed as Unauthorized. What does that status mean?
device registrationunauthorized statusconnection statusdevice discovery - Question #24System Settings and High Availability
Refer to the exhibit. What is the purpose of configuring FortiAnalyzer with the settings displayed in the image?
FortiAnalyzer settingssecurity configurationsystem hardening - Question #25Logging and Archiving
What are offline logs on FortiAnalyzer?
offline logsarchive logslog compressionlog types - Question #26System Settings and High Availability
Which two elements are contained in a system backup created on FortiAnalyzer? (Choose two.)
system backupbackup contentsreport informationsystem information - Question #27System Settings and High Availability
Which statement when you are upgrading the firmware on an HA cluster made up of three FortiAnalyzer devices is true?
firmware upgradeHA clusterupgrade sequenceprimary secondary - Question #28System Settings and High Availability
What is the purpose of employing RAID with FortiAnalyzer?
RAIDdata redundancylog storagedisk management - Question #29System Settings and High Availability
Which three RAID configurations provide fault tolerance on FortiAnalyzer? (Choose three.)
RAIDfault toleranceRAID 1RAID 5 - Question #30Device Registration and ADOMs
Refer to the exhibit. Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?
FortiAnalyzer Fabricfabric membershipversion compatibilitydevice eligibility - Question #31Troubleshooting and Maintenance
You finished registering a FortiGate device. After traffic starts to flow through FortiGate, you notice that only some of the logs expected are being received on FortiAnalyzer. Wha...
FortiGate loggingmissing logslog configurationtroubleshooting - Question #32System Settings and High Availability
An administrator, fortinet, can view logs and perform device management tasks, such as adding and removing registered devices. However, administrator fortinet is not able to create...
administrative profilesStandard_User profilepermissionsmail server access - Question #33Logging and Archiving
Which two parameters are used to calculate the Total Quota value available on FortiAnalyzer? (Choose two.)
disk quotatotal quotareserved spacestorage calculation - Question #34FortiAnalyzer Initial Setup
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two....
LDAP authenticationwildcard administratorremote authenticationadministrator accounts - Question #35Device Registration and ADOMs
An administrator has moved a FortiGate device from the root ADOM to ADOM1. Which two statements are true regarding logs? (Choose two.)
ADOM migrationarchived logsanalytics logsdatabase rebuild - Question #36Device Registration and ADOMs
What are two advantages of setting up fabric ADOM? (Choose two.)
fabric ADOMSecurity Fabriclog correlationADOM types - Question #37
What is the purpose of a predefined template on the FortiAnalyzer?
- Question #38System Settings and High Availability
For which two SAML roles can the FortiAnalyzer be configured? (Choose two.)
SAMLidentity providerservice providerSSO - Question #39Reports
Which two purposes does the auto cache setting on reports serve? (Choose two.)
auto cachehcachereport generationreport optimization - Question #40
Which two methods can you use to send notifications when an event occurs that matches a configured event handier? (Choose two.)
- Question #41Logging and Archiving
Which two statements are true regarding log fetching on FortiAnalyzer? (Choose two.)
log fetchinghistorical datafirmware compatibilityFortiAnalyzer roles - Question #42SOC Features (Playbooks, Incident Response)
An administrator has configured the following settings: config system fortiview settings set resolve-ip enable end What is the significance of executing this command?
FortiViewIP resolutionhostname resolutionCLI configuration - Question #43Device Registration and ADOMs
Which two statements are true regarding ADOM modes? (Choose two.)
ADOM modesnormal modeadvanced modeVDOM assignment - Question #44Logging and Archiving
Which two statements are true regarding FortiAnalyzer log forwarding? (Choose two.)
log forwardingaggregation modelog encryptionFortiAnalyzer-to-FortiAnalyzer - Question #45
An administrator has moved FortiGate A from the root ADOM to ADOM1. However, the administrator is not able to generate reports for FortiGate A in ADOM1. What should the administrat...
- Question #46Reports
Which statement is true regarding Macros on FortiAnalyzer?
macrosADOM-specificreport templates - Question #47FortiAnalyzer Initial Setup
Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)
operating modescollector modeanalyzer modelog forwarding - Question #48
Refer to the exhibit. The exhibit shows "remoteservergroup" is an authentication server group with LDAP and RADIUS servers. Which two statements express the significance of enablin...
- Question #49Troubleshooting and Maintenance
A rogue administrator was accessing FortiAnalyzer without permission, and you are tasked to see what activity was performed by that rogue administrator on FortiAnalyzer. What can y...
task monitoradmin auditrogue administratoractivity logging - Question #50Device Registration and ADOMs
The admin administrator is failing to register a FortiClient EMS on the FortiAnalyzer device. What can be the reason for this failure?
FortiClient EMSdevice registrationADOM requirement - Question #51Reports
Refer to the exhibit. Which two statements are true regarding enabling auto-cache on FortiAnalyzer? (Choose two.)
auto-cachereport schedulingreport generation performance