Practice FCP_FAZ_AD-7.4 Exam Online

Question 1

Refer to the exhibit.

What does the data point at 14:35 tell you?

A : FortiAnalyzer has temporary stopped receiving logs so older logs can be indexed.

B : FortiAnalyzer is indexing logs faster than logs are being received.

C : The fortilogd daemon is ahead in indexing by one log.

D : FortiAnalyzer is dropping logs.

Answer: B

Question 2

By default, what happens when a log file reaches its maximum file size?

A : FortiAnalyzer overwrites the log files.

B : FortiAnalyzer stops logging.

C : FortiAnalyzer rolls the active log by renaming the file.

D : FortiAnalyzer forwards logs to syslog.

Answer: C

Question 3

FortiAnalyzer centralizes which functions? (Choose three)

A : Network analysis

B : Graphical reporting

C : Content archiving / data mining

D : Vulnerability assessment

E : Security log analysis / forensics

Answer: B,C,E

Question 4

You are using RAID with a FortiAnalyzer that supports software RAID, and one of the hard disks on FortiAnalyzer has failed. What is the recommended method to replace the disk?

A : Shut down FortiAnalyzer and then replace the disk

B : Downgrade your RAID level, replace the disk, and then upgrade your RAID level

C : Clear all RAID alarms and replace the disk while FortiAnalyzer is still running

D : Perform a hot swap

Answer: A

Question 5

Refer to the exhibit.

Which statement is correct regarding the event displayed?

A : An incident was created from this event.

B : The security risk was blocked or dropped.

C : The security event risk is considered open.

D : The risk source is isolated.

Answer: B

Name:	FCP - FortiAnalyzer 7.4 Administrator
Exam Code:	FCP_FAZ_AD-7.4
Certification:	Fortinet Certified Professional (FCP)
Vendor:	Fortinet
Total Questions:	181
Last Updated:	Nov 11, 2025

Fortinet FCP_FAZ_AD-7.4 Answers