Free FCP – FortiAnalyzer 7.4 Administrator Exam FCP_FAZ_AD-7.4 Exam Practice Test

You finished registering a FortiGate device. After traffic starts to flow through FortiGate, you notice that only some of the logs expected are being received on FortiAnalyzer.What could be the reason for the logs not arriving on FortiAnalyzer?

• FortiGate was added to the wrong ADOM type.
• This FortiGate model is not fully supported.
• FortiGate does not have logging configured correctly.
• This FortiGate is part of an HA cluster but it is the secondary device.

Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two.)

• A local wildcard administrator account
• An administrator group
• One or more remote LDAP servers
• LDAP servers IP addresses added as trusted hosts

Which two statements about high availability (HA) on FortiAnalyzer are true? (Choose two.)

• FortiAnalyzer HA supports synchronization of logs as well as some system and configuration settings.
• FortiAnalyzer HA active-passive mode can function without VRRP.
• All devices in a FortiAnalyzer HA cluster must run in the same operation mode, either analyzer mode or collector mode.
• All devices in a FortiAnalyzer HA cluster must have the same available disk space.

Which statement about the communication between FortiGate high availability (HA) clusters and FortiAnalyzer is true?

• If devices were registered to FortiAnalyzer before forming a cluster, you can manually add them together.
• FortiAnalyzer distinguishes each cluster member by the IP addresses in log message headers.
• If the HA primary device becomes unavailable, you must remove it from the HA cluster list on FortiAnalyzer.
• The FortiGate HA cluster must be in active-passive mode in order to avoid conflict.

Which two statements about deleting ADOMs are true? (Choose two.)

• Logs must be purged or migrated before you can delete an ADOM.
• ADOMs with registered devices cannot be deleted.
• Default ADOMs cannot be deleted.
• The status of the ADOMs must be unlocked.

Which two parameters impact the amount of reserved disk space required by FortiAnalyzer? (Choose two.)

• Total quota
• License type
• RAID level
• Disk size

What are ofline logs on FortiAnalyzer?

• Compressed logs, also known as archive logs
• Logs that are indexed and stored in the SQL database
• Any logs collected from ofline devices after they boot up
• Real-time logs that are not yet indexed

In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?

• The traffic destination is another FortiGate in the fabric.
• The upstream FortiGate is configured to do NAT
• Log redundancy is configured in the fabric.
• The downstream device cannot connect to FortiAnalyzer.

Which two methods can you use to restrict administrative access on FortiAnalyzer? (Choose two.)

• Configure trusted hosts.
• Limit access to specific virtual domains.
• Fabric connectors to external LDAP servers.
• Use administrator profiles.

Which process is responsible for enforcing the log file size?

• oftpd
• miglogd
• sqlplugind
• logfiled