[May-2026] Use Real FCP_FAZ_AD-7.4 Dumps Free Sample Questions and Practice Test Engine
Pass Fortinet FCP_FAZ_AD-7.4 exam - questions - convert Tets Engine to PDF
Fortinet FCP_FAZ_AD-7.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
NEW QUESTION # 41
After you have moved a registered logging device out of one ADOM and into a new ADOM, what is the purpose of running the following CLI command?
execute sql-local rebuild-adom <new-ADOM-name>
- A. To remove the analytics logs of the device from the old database
- B. To migrate the archive logs to the new ADOM
- C. To reset the disk quota enforcement to default
- D. To populate the new ADOM with analytical logs for the moved device, so you can run reports
Answer: D
Explanation:
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 128: Are the device analytics logs required for reports in the new ADOM? If so, rebuild the new ADOM database
NEW QUESTION # 42
For which two purposes would you use the command set log-checksum? (Choose two.)
- A. To prevent log modification or tampering
- B. To protect log data from man-in-the-middle attacks
- C. To encrypt log communications and data
- D. To send an identical set of logs to a second logging server
Answer: A,B
NEW QUESTION # 43
You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?
- A. The logfiled process stores logs in offline mode
- B. FortiGate uses the miglogd process to cache the logs
- C. Logs are dropped
- D. FortiAnalyzer uses log fetching to retrieve the logs when back online
Answer: B
Explanation:
NEW QUESTION # 44
Which process is responsible for enforcing the log file size?
- A. sqlplugind
- B. oftpd
- C. logfiled
- D. miglogd
Answer: C
NEW QUESTION # 45
Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?
- A. Indicators of Compromise
- B. Log upload
- C. Log forwarding an aggregation mode
- D. Log fetching
Answer: D
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/651442/fetcher-management
NEW QUESTION # 46
What statements are true regarding FortiAnalyzer 's treatment of high availability (HA) dusters? (Choose two)
- A. FortiAnalyzer receives logs from d devices in a duster.
- B. FortiAnalyzer receives bgs only from the primary device in the cluster.
- C. FortiAnalyzer only needs to know (he serial number of the primary device in the cluster-it automaticaly discovers the other devices.
- D. FortiAnalyzer distinguishes different devices by their serial number.
Answer: A,D
NEW QUESTION # 47
Which two statements are true regarding FortiAnalyzer operating modes? (Choose two.)
- A. When in collector mode. FortiAnalyzer supports event management and reporting features.
- B. By deploying different FortiAnalyzer devices with collector and analyzer mode in a network, you can improve the overall performance of log receiving, analysis, and reporting
- C. When in collector mode, FortiAnalyzer collects logs from multiple devices and forwards these logs in the original binary format.
- D. Collector mode is the default operating mode.
Answer: B,C
Explanation:
Reference:
https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/312644/analyzer-collector-collaboration
NEW QUESTION # 48
What are offline logs on FortiAnalyzer?
- A. Logs that are collected from offline devices after they boot up.
- B. Compressed logs, which are also known as archive logs, are considered to be offline logs.
- C. When you restart FortiAnalyzer. all stored logs are considered to be offline logs.
- D. Logs that are indexed and stored in the SQL database.
Answer: B
Explanation:
Reference: https://help.fortinet.com/fa/faz50hlp/56/5-6-6/Content/FortiAnalyzer_Admin_Guide
/0300_Key_concepts/0600_Log_Storage/0400_Archive_analytics_logs.htm
Logs are received and saved in a log file on the FortiAnalyzer disks. Eventually, when the log file reaches a configured size, or at a set schedule, it is rolled over by being renamed. These files (rolled or otherwise) are known as archive logs and are considered offline so they don't offer immediate analytic support. Combined, they count toward the archive quota and retention limits, and they are deleted based on the ADOM data policy. FortiAnalyzer_7.0_Study_Guide-Online page 140
NEW QUESTION # 49
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. A remote LDAP server
- B. An administrator group
- C. A trusted host profile that restricts access to the LDAP group
- D. A local wildcard administrator account
Answer: A,D
Explanation:
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD38567
NEW QUESTION # 50
Which two of the available registration methods place the device automatically in its assigned ADOM? {Choose two.)
- A. Fabric Authorization
- B. Pre-shared key
- C. Serial number
- D. Request from the device
Answer: B,C
NEW QUESTION # 51
Refer to the exhibit.
Laptopt is used by several administrators to manage FortiAnalyzer. You want to configure a generic text filter that matches all login attempts to the web interface generated by any user other than "admin" and coming from Laptop1:
Which filter will achieve the desired result?
- A. operation-login & performed_on=="GUI(10.1.1.100)" & user!=admin
- B. operation-login & srcip==10.1.1.100 & dstip==10.1.1.210 & user==admin
- C. operation-login & performed_on=="GUI(10.1.1.210)' & user!=admin
- D. operation-login & dstip==10.1.1.210 & userl-admin
Answer: A
Explanation:
On there the task was to create a filter for failed logins from any other location but the local computer: "Add the text performed_on!~10.0.1.10. This includes any attempts coming from devices with an IP address that is not the one configured on the Local-Client computer."
NEW QUESTION # 52
Which statement is true about sending notifications with incident updates?
- A. You can send notifications to multiple external platforms
- B. Notifications can be sent only by email.
- C. If you use multiple fabric connectors, all connectors must have the same notification settings
- D. Notifications can be sent only when an incident is updated or deleted.
Answer: A
Explanation:
You can add more than one fabric connector, each with the same or different notification settings. The receiving side of the connector must be configured for the notifications to be sent successfully.
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 34: Fabric connectors also enable FortiAnalyzer to send notifications to ITSM platforms when a new incident is created or for any subsequent updates.
NEW QUESTION # 53
For which two purposes would you use the command set log checksum? (Choose two.)
- A. To prevent log modification or tampering
- B. To encrypt log communications
- C. To help protect against man-in-the-middle attacks during log upload from FortiAnalyzer to an SFTP server
- D. To send an identical set of logs to a second logging server
Answer: A,C
Explanation:
To prevent log modification or tampering: The set log-checksum command with options like md5 or sha1 calculates a checksum value for the log data. This checksum acts as a digital signature, allowing FortiAnalyzer to verify the integrity of the logs and detect any unauthorized modifications.
To protect log data from man-in-the-middle attacks: By using checksums, FortiAnalyzer can ensure that the logs received have not been altered in transit during a man-in-the-middle attack. If the checksum of the received logs doesn't match the expected value, it indicates potential tampering.
FortiAnalyzer_7.0_Study_Guide-Online page 149
NEW QUESTION # 54
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. One or more remote LDAP servers
- B. An administrator group
- C. LDAP servers IP addresses added as trusted hosts
- D. A local wildcard administrator account
Answer: A,D
Explanation:
A wildcard administrator account allows any user from the specified LDAP group to authenticate, and the remote LDAP servers must be configured to validate those user credentials. The combination of these settings enables authentication via LDAP for non-local users.
NEW QUESTION # 55
FortiAnalyzer reports are dropping analytical data from 15 days ago, even though the data policy setting for analytics logs is 60 days.
What is the most likely problem?
- A. Quota enforcement is acting on analytical data before a report is complete
- B. CPU resources are too high
- C. Logs are rolling before the report is run
- D. Disk utilization for archive logs is set for 15 days
Answer: C
Explanation:
Reference: https://forum.fortinet.com/tm.aspx?m=138806
NEW QUESTION # 56
An administrator has moved a registered logging device out of one ADOM and into a new ADOM.
What is the purpose of running the following command: execute sql-local rebuild-adom <new-ADOM- name>?
- A. To remove the analytics logs of the device from the old database
- B. To migrate the archive logs to the new ADOM
- C. To reset the ADOM disk quota enforcement to its default value
- D. To populate the new ADOM with analytical logs for the moved device, so you can run reports
Answer: D
NEW QUESTION # 57
Refer to the exhibit.
Based on the partial outputs displayed, which devices can be members of a FortiAnalyzer Fabric?
- A. All devices listed can be members
- B. FortiAnalyzer1 and FortiAnalyzer2
- C. FortiAnalyzer2 and FortiAnalyzer3
- D. FortiAnalyzerl and FortiAnalyzer3
Answer: A
NEW QUESTION # 58
Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?
- A. WHERE
- B. ORDER BY
- C. FROM
- D. LIMIT
Answer: C
Explanation:
Reference: https://kb.fortinet.com/kb/documentLink.do?externalID=FD48500
NEW QUESTION # 59
Which process is responsible for enforcing the archive file size?
- A. sqlplugind
- B. logfiled
- C. oftpd
- D. miglogd
Answer: C
NEW QUESTION # 60
View the exhibit:
What does the 1000MB maximum for disk utilization refer to?
- A. The disk quota for the ADOM type
- B. The disk quota for all devices in the ADOM
- C. The disk quota for each device in the ADOM
- D. The disk quota for the FortiAnalyzer model
Answer: B
Explanation:
https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/743670/configuring-log-storage-policy
NEW QUESTION # 61
An administrator has configured the following settings:
config system fortiview settings
set resolve-ip enable
end
What is the significance of executing this command?
- A. It resolves the source and destination IP addresses to a hostname in FortiView on FortiAnalyzer.
- B. Use this command only if the source IP addresses are not resolved on FortiGate.
- C. You must configure local DNS servers on FortiGate for this command to resolve IP addresses on Forti Analyzer.
- D. It resolves the destination IP address to a hostname in FortiView on FortiAnalyzer.
Answer: B
Explanation:
Reference: https://community.fortinet.com/t5/Fortinet-Forum/Hostnames-in-FortiAnalyzer/m-p/95351?
m=156950
NEW QUESTION # 62
Which statement correctly describes RAID 10 (1+0) on FortiAnalyzer?
- A. A configuration with four disks, each with 2 TB of capacity, provides a total space of 2 TB.
- B. A configuration with four disks, each with 2 TB of capacity, provides a total space of 4 TB.
B It combines mirroring striping and distributed parity to provide performance and fault tolerance - C. It uses striping to provide performance and fault tolerance.
Answer: B
Explanation:
RAID 10 combines mirroring (RAID 1) and striping (RAID 0). In a RAID 10 setup with four disks, data is mirrored across two pairs of disks, and those pairs are striped for performance. This results in improved performance and fault tolerance, but the total usable storage is 50% of the total raw storage, meaning four 2 TB disks provide 4 TB of usable space.
NEW QUESTION # 63
......
Pass Your FCP_FAZ_AD-7.4 Exam Easily - Real FCP_FAZ_AD-7.4 Practice Dump Updated May 06, 2026: https://www.examcollectionpass.com/Fortinet/FCP_FAZ_AD-7.4-practice-exam-dumps.html
2026 Realistic Verified Free Fortinet FCP_FAZ_AD-7.4 Exam Questions: https://drive.google.com/open?id=1ShGbxL_JVMUvmtmrsSL4bdmm9U6Yxg10