正真正銘のベスト試験材料はFCP_FAZ_AD-7.4テストエンジン練習試験合格させます
[2025年更新]FCP_FAZ_AD-7.4のPDF問題、完璧に練習問題で合格
質問 # 83
After generating a report, you notice the information you were expecting to see is not included in it. What are two possible reasons for this scenario? (Choose two.)
- A. The time frame selected in the report is wrong.
- B. You enabled auto-cache with extended log filtering.
- C. The logs were overwritten by the data retention policy.
- D. The logfiled service has not indexed all the expected logs.
正解：C、D
質問 # 84
What must you configure on FortiAnalyzer to upload a FortiAnalyzer report to a supported external server?
(Choose two.)
- A. SFTP, FTP, or SCP server
- B. Output profile
- C. Mail server
- D. Report scheduling
正解：A、B
解説：
https://docs.fortinet.com/document/fortianalyzer/6.0.2/administration-guide/598322/creating-output-profiles
質問 # 85
Which two statements are true regarding FortiAnalyzer system backups? (Choose two.)
- A. Existing reports can be included in the backup files.
- B. The system reserves at least 5% to 20% disk space for backup files.
- C. Scheduled system backups can be configured only from the CLI.
- D. Backup files can be uploaded to SCP and SFTP servers.
正解：A、D
解説：
FortiAnalyzer allows for the inclusion of existing reports in the backup files, providing a comprehensive backup of configurations and data. Additionally, the backup files can be configured to be uploaded to SCP and SFTP servers, ensuring secure transfer and offsite storage of backup data. This can be configured both in the GUI and the CLI, providing flexibility in how backups are scheduled and managed.
Reference: FortiAnalyzer 7.4.1 Administration Guide, "Scheduling automatic backups" section.
質問 # 86
What is the purpose of trigger variables?
- A. To provide the trigger information to make the playbook start running
- B. To use information from the trigger to filter the action in a task
- C. To display statistics about the playbook runtime
- D. To store the start times of playbooks with On_Schedule triggers
正解：C
質問 # 87
Which log will generate an event with the status Contained?
- A. An AppControl log with action=blocked.
- B. An IPS log with action=pass.
- C. An AV log with action=quarantine.
- D. A WebFilter log with action=dropped.
正解：C
質問 # 88
Which two statements are true regarding fabric connectors? (Choose two.)
- A. The storage connector service does not require a separate license to send logs to the cloud platform.
- B. Fabric connectors allow you to save storage costs and improve redundancy.
- C. Cloud-out connectors allow you to send real-time logs to public cloud accounts like Amazon S3.
- D. Using fabric connectors is more efficient than third-party polling information from the FortiAnalyzer API
正解：B、D
解説：
Using fabric connectors is more efficient than third-party polling information from the FortiAnalyzer API - Fabric connectors are designed to integrate directly with the security fabric components and other services, which allows them to operate more efficiently compared to using third-party applications to poll information via APIs. APIs often involve more overhead due to the need for frequent polling and data retrieval operations, which can be resource-intensive.
Cloud-out connectors allow you to send real-time logs to public cloud accounts like Amazon S3. - Cloud- out connectors are specifically designed to facilitate the direct and real-time transfer of logs and other data to cloud services like Amazon S3. These connectors streamline the process by providing a built-in mechanism that bypasses the need for additional scripting or manual configuration.
質問 # 89
Which statement correctly describes the management extensions available on FortiAnalyzer?
- A. Management extensions require a dedicated VM for best performance.
- B. Management extensions allow FortiAnalyzer to act as a ForbSIEM supervisor.
- C. Management extensions do not require additional licenses.
- D. Management extensions may require a minimum number of CPU cores to run.
正解：D
解説：
Events in FortiAnalyzer will be in one of four statuses. The current status will determine if more actions need to be taken by the security team or not.
The possible statuses are:
Unhandled: The security event risk is not mitigated or contained, so it is considered open.
Contained: The risk source is isolated.
Mitigated: The security risk is mitigated by being blocked or dropped.
(Blank): Other scenarios.
FortiAnalyzer_7.0_Study_Guide-Online pag. 189.
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 189: Review the hardware requirements before you enable a management extension application. Some of them require a minimum amount of memory or a minimum number of CPU cores.
質問 # 90
You need to upgrade your FortiAnalyzer firmware.
What happens to the logs being sent to FortiAnalyzer from FortiGate during the time FortiAnalyzer is temporarily unavailable?
- A. Logs are dropped
- B. FortiGate uses the miglogd process to cache the logs
- C. The logfiled process stores logs in offline mode
- D. FortiAnalyzer uses log fetching to retrieve the logs when back online
正解：B
質問 # 91
What are two benefits of using fabric connectors? (Choose two.)
- A. Fabric connectors allow you to improve redundancy.
- B. You do not need an additional license to send logs to the cloud platform.
- C. They allow FortiAnalyzer to send logs in real-time to public cloud accounts.
- D. Using fabric connectors is more efficient than using third-party polling with API.
正解：A、C
質問 # 92
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate to FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. A trusted host profile that restricts access to the LDAP group
- B. An administrator group
- C. A local wildcard administrator account
- D. A remote LDAP server
正解：C、D
質問 # 93
Which statements are correct regarding FortiAnalyzer reports? (Choose two)
- A. FortiAnalyzer provides the ability to create custom reports.
- B. FortiAnalyzer includes pre-defined reports only.
- C. FortiAnalyzer allows reporting for FortiGate devices only.
- D. FortiAnalyzer glows you to schedule reports to run.
正解：A、D
質問 # 94
What are offline logs on FortiAnalyzer?
- A. Any logs collected from offline devices after they boot up
- B. Compressed logs, also known as archive logs
- C. Real-time logs that are not yet indexed
- D. Logs that are indexed and stored in the SQL database
正解：A
解説：
These logs are generated when devices that were previously offline come back online and send their log data to the FortiAnalyzer.
質問 # 95
Refer to the exhibit.
The exhibit shows the creation of a new administrator on FortiAnalyzer. The new account uses the credentials stored on an LDAP server.
Why would an administrator configure a password for this account?
- A. This password is used if the authentication server becomes unreachable.
- B. This password is set to comply with FortiAnalvzer password policy
- C. This password is required because this is a restricted user.
- D. This password authenticates FortiAnalyzer aqainst the LDAP server.
正解：A
解説：
When using LDAP for authentication, a password can be set locally on FortiAnalyzer as a fallback option in case the LDAP server becomes unreachable. This ensures that the administrator can still log in if there are issues with the LDAP server.
質問 # 96
Which statement is true when you are upgrading the firmware on an HA cluster made up of throe FortiAnalyzer devices?
- A. Enabling uninterruptible-upgrade prevents normal operations from being interrupted during the upgrade.
- B. All FortiAnalyzer devices will be upgraded at the same time.
- C. You can perform the firmware upgrade using only a console connection.
- D. First, upgrade the secondary devices, and then upgrade the primary device.
正解：D
解説：
In an HA cluster, the firmware upgrade process involves upgrading the secondary devices first. This approach ensures that the primary device can continue to handle traffic and maintain the operational stability of the network while the secondary devices are being upgraded. Once the secondary devices have successfully upgraded their firmware and are operational, the primary device can then be upgraded. This method minimizes downtime and maintains network integrity during the upgrade process.
When upgrading firmware in a High Availability (HA) cluster of FortiAnalyzer units, the recommended practice is to first upgrade the secondary devices before upgrading the primary device. This approach ensures that the primary device, which coordinates the cluster's operations, remains functional for as long as possible, minimizing the impact on log collection and analysis. Once the secondary devices are successfully upgraded and operational, the primary device can be upgraded, ensuring a smooth transition and maintaining continuous operation of the cluster.
Reference: FortiAnalyzer 7.2 Administrator Guide - "System Administration" and "High Availability" sections.
質問 # 97
In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?
- A. The upstream FortiGate is configured to do NAT.
- B. Log redundancy is configured in the fabric.
- C. The traffic destination is another FoitiGate in the fabric.
- D. The downstream device cannot connect to FortiAnalyzer.
正解：D
解説：
In the Fortinet secure fabric, the scenario for having the upstream FortiGate create a traffic log associated with a session initiated on the downstream FortiGate appliance is: The upstream FortiGate is configured with Network Address Translation (NAT).
When the upstream FortiGate performs NAT for sessions initiated on downstream devices, it creates logs for those NAT-processed sessions. This is because the upstream device is responsible for providing public network egress for these sessions and logging traffic information.
質問 # 98
What does the disk status Degraded mean for RAID management?
- A. One or more drives are missing from the FortiAnalyzer unit. The drive is no longer available to the operating system.
- B. The FortiAnalyzer device is writing to all the hard drives on the device in order to make the array fault tolerant.
- C. The FortiAnalyzer device is writing data to a newly added hard drive in order to restore the hard drive to an optimal state.
- D. The hard driveiIs no longer being used by the RAID controller
正解：D
質問 # 99
How are logs forwarded when FortiAnalyzer is using aggregation mode?
- A. Logs and content files are stored and uploaded at a scheduled time.
- B. Logs are forwarded as they are received.
- C. Logs and content files are forwarded as they are received.
- D. Logs are forwarded as they are received and content files are uploaded at a scheduled time.
正解：A
解説：
https://www.fortinetguru.com/2020/07/log-forwarding-fortianalyzer-fortios-6-2-3/
https://docs.fortinet.com/document/fortianalyzer/6.2.0/administration-guide/420493/modes
質問 # 100
Which tabs do not appear when FortiAnalyzer is operating in Collector mode?
- A. Reporting
- B. Event Management
- C. Device Manger
- D. FortiView
正解：B
質問 # 101
Which two statements are correct regarding the export and import of playbooks? (Choose two.)
- A. A playbook that was disabled when it was exported, will be disabled when it is imported.
- B. You can export only one playbook at a time.
- C. Playbooks can be exported and imported only within the same FortiAnaryzer.
- D. You can import a playbook even if there is another one with the same name in the destination.
正解：A、D
解説：
If the imported playbook has the same name as an existing one, FortiAnalyzer will create a new name that includes a timestamp to avoid conflicts.
Playbooks are imported with the same status they had (enabled or disabled) when they were exported.
Playbooks set to run automatically should be exported while they are disabled to avoid unintended runs on the destination.
質問 # 102
You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?
- A. FortiAnalyzer migrates archive logs to the new ADOM.
- B. FortiAnalyzer migrates analytics logs to the new ADOM.
- C. FortiAnalyzer removes logs from the old ADOM.
- D. FortiAnalyzer resets the disk quota of the new ADOM to default.
正解：B
解説：
https://kb.fortinet.com/kb/documentLink.do?externalID=FD40383
質問 # 103
Which statement is true about the communication between FortiGate high availability (HA) clusters and FortiAnalyzer?
- A. Only the primary device in the cluster communicates with FortiAnalyzer.
- B. FortiAnalyzer distinguishes each cluster member by its MAC address.
- C. Each cluster member sends its logs directly to FortiAnalyzer.
- D. You must add the device lo the cluster first, and then registers the cluster with FortiAnalyzer.
正解：A
解説：
In a FortiGate high availability (HA) cluster, only the primary device sends its logs to the FortiAnalyzer.
This is to ensure that logs are not duplicated between the primary and secondary devices in the cluster.
The configuration of the FortiAnalyzer server on the FortiGate is such that the HA primary device is set as the server that forwards the logs.
Reference: FortiAnalyzer 7.4.1 Administration Guide, sections mentioning HA cluster configuration and log forwarding.
質問 # 104
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. An administrator group
- B. A local wildcard administrator account
- C. LDAP servers IP addresses added as trusted hosts
- D. One or more remote LDAP servers
正解：B、D
解説：
A wildcard administrator account allows any user from the specified LDAP group to authenticate, and the remote LDAP servers must be configured to validate those user credentials. The combination of these settings enables authentication via LDAP for non-local users.
質問 # 105
......
Fortinet FCP_FAZ_AD-7.4 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
ベスト最新資料はFCP_FAZ_AD-7.4オンライン練習試験：https://www.goshiken.com/Fortinet/FCP_FAZ_AD-7.4-mondaishu.html
リアル練習FCP_FAZ_AD-7.4 FCP - FortiAnalyzer 7.4 Administrator試験知能問題集：https://drive.google.com/open?id=1b-zOhjutiv-jBwf8wf2aSjkvsgNfR0LS