Last Updated On : 13-Jan-2026
Total 166 Questions
An administrator, fortinet, can view logs and perform device management tasks, such as
adding and removing registered devices. However, administrator fortinet is not able to
create a mail server that can be used to send alert emails.
What can be the problem?
A. ADOM mode is configured with Advanced mode.
B. A trusted host is configured.
C. fortinet is assigned the default Standard_User administrative profile.
D. fortinet is assigned the default Restricted_User administrative profile.
In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?
A. The traffic destination is another FortiGate in the fabric.
B. The upstream FortiGate is configured to do NAT
C. Log redundancy is configured in the fabric.
D. The downstream device cannot connect to FortiAnalyzer.
Explanation: When the upstream FortiGate is performing Network Address Translation (NAT), it creates new session entries for traffic passing through it. As a result, it generates its own traffic logs for those sessions, even if the sessions were initiated on a downstream FortiGate. This is because the upstream FortiGate is altering the source IP address, making it responsible for tracking the session details.
Which two methods can you use to restrict administrative access on FortiAnalyzer? (Choose two.)
A. Configure trusted hosts.
B. Limit access to specific virtual domains.
C. Fabric connectors to external LDAP servers.
D. Use administrator profiles.
Logs are being deleted from one of the ADOMs earlier than the configured setting for
archiving in the data
policy.
What is the most likely problem?
A. CPU resources are too high
B. Logs in that ADOM are being forwarded, in real-time, to another FortiAnalyzer device
C. The total disk space is insufficient and you need to add other disk
D. The ADOM disk quota is set too low, based on log rates
How can you attach a report to an incident?
A. By attaching it to an event handler alert
B. By editing the settings of the desired report
C. From the properties of an existing incident
D. Saving it in JSON format, and then importing it
What statements are true regarding the "store and upload" log transfer option between FortiAnalyzer and FortiGate? (Choose three.)
A. All FortiGates can send logs to FortiAnalyzer using the store and upload option.
B. Only FortiGate models with hard disks can send logs to FortiAnalyzer using the store and upload option.
C. Both secure communications methods (SSL and IPsec) allow the store and upload option.
D. Disk logging is enabled on the FortiGate through the CLI only.
E. Disk logging is enabled by default on the FortiGate.
Which log will generate an event with the status Contained?
A. An IPS log with action=pass
B. A WebFilter log with action=dropped.
C. An AV log with action=quarantine.
D. An AppControl log with action=blocked.
| Page 5 out of 24 Pages |
| FCP_FAZ_AD-7.4 Practice Test Home | Previous |
Choosing the right preparation material is critical for passing the Fortinet FCP - FortiAnalyzer 7.4 Administrator exam. Here’s how our FCP_FAZ_AD-7.4 practice test is designed to bridge the gap between knowledge and a passing score.
Copyright © - All Rights Reserved