[2025年06月28日] 最速準備で試験合格！FCP_FAZ_AD-7.4問題の事前予備
FCP_FAZ_AD-7.4のPDF問題集リアル2025最近更新された問題
Fortinet FCP_FAZ_AD-7.4 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
質問 # 23
Which statement when you are upgrading the firmware on an HA cluster made up of three FortiAnalyzer devices is true?
- A. All FortiAnalyzer devices will be upgraded at the same time.
- B. Enabling uninterruptible-upgrade prevents normal operations from being interrupted during the upgrade.
- C. First, upgrade the secondary devices, and then upgrade the primary device.
- D. You can perform the firmware upgrade using only a console connection.
正解：C
解説：
When upgrading firmware on an HA cluster of FortiAnalyzer devices, it is recommended to upgrade the secondary devices first, and then upgrade the primary device to minimize downtime and maintain continuity in log collection and other HA functions. This ensures that the primary device continues to handle operations while the secondary devices are being upgraded, and once the secondary devices are updated, the primary device can be upgraded with minimal service disruption.
質問 # 24
An administrator has configured the following settings:
config system global
set log-checksum md5-auth
end
What is the significance of executing this command?
- A. This command encrypts log transfer between FortiAnalyzer and other devices.
- B. This command records the log file MD5 hash value.
- C. This command records passwords in log files and encrypts them.
- D. This command records the log file MD5 hash value and authentication code.
正解：D
質問 # 25
When working with FortiAnalyzer reports, what is the purpose of a dataset?
- A. To define the chart type to be used
- B. To set the data included in templates
- C. To provide the layout used for reports
- D. To retrieve data from the database
正解：D
解説：
Reference:
Datasets: Structured Query Language (SQL) SELECT queries that extract specific data from the database
質問 # 26
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. LDAP servers IP addresses added as trusted hosts
- B. An administrator group
- C. One or more remote LDAP servers
- D. A local wildcard administrator account
正解：B、C
解説：
C . One or more remote LDAP servers: FortiAnalyzer needs to be configured to communicate with your external LDAP server where the user accounts and groups reside. This involves setting up the LDAP server address, port, and authentication details.
B . An administrator group: You need to create an administrator group on FortiAnalyzer and link it to the specific LDAP group that contains the users you want to grant administrative access. This allows any user within that LDAP group to authenticate and have the permissions assigned to the administrator group on FortiAnalyzer.
This configuration allows FortiAnalyzer to authenticate users against the external LDAP server and authorize them based on their membership in the designated LDAP group. This way, you don't need to create individual local accounts for each administrator, simplifying user management and centralizing authentication.
質問 # 27
Refer to the exhibit.
What is the purpose of using the Chart Builder feature on FortiAnalyzer?
- A. To build a dataset and chart automatically, based on the filtered search results
- B. To build a chart automatically based on the top 100 log entries
- C. To add charts directly to generate reports in the current ADOM
- D. To add a new chart under FortiView to be used in new reports
正解：C
質問 # 28
What does the disk status Degraded mean for RAID management?
- A. One or more drives are missing from the FortiAnalyzer unit.
- B. The hard drive is no longer being used by the RAID controller.
- C. FortiAnalyzer determined that the parity data in the disk is not valid.
- D. The device is writing data to the disk to restore the volume to an optimal state.
正解：B
解説：
When the RAID status is Degraded, it typically indicates that one or more drives in the RAID array have failed or are missing, causing the RAID array to operate with reduced redundancy. In this state, the array is still functioning, but it's at risk because the fault tolerance provided by RAID is compromised.
質問 # 29
Which statement about the FortiSOAR management extension is correct?
- A. It requires a dedicated FortiSOAR device or VM.
- B. It does not include a limited trial by default.
- C. It requires a FortiManager configured to manage FortiGate
- D. It runs as a docker container on FortiAnalyzer
正解：D
質問 # 30
Which clause is considered mandatory in SELECT statements used by the FortiAnalyzer to generate reports?
- A. ORDER BY
- B. FROM
- C. LIMIT
- D. WHERE
正解：B
質問 # 31
In a Fortinet Security Fabric, what can make an upstream FortiGate create traffic logs associated with sessions initiated on downstream FortiGate devices?
- A. Log redundancy is configured in the fabric.
- B. The traffic destination is another FortiGate in the fabric.
- C. The upstream FortiGate is configured to do NAT
- D. The downstream device cannot connect to FortiAnalyzer.
正解：C
解説：
When the upstream FortiGate is performing Network Address Translation (NAT), it creates new session entries for traffic passing through it. As a result, it generates its own traffic logs for those sessions, even if the sessions were initiated on a downstream FortiGate. This is because the upstream FortiGate is altering the source IP address, making it responsible for tracking the session details.
質問 # 32
Which two statements are true about FortiAnalyzer log forwarding modes? (Choose two.)
- A. Forwarding mode requires configuration on the server side.
- B. Both modes, forwarding and aggregation send logs as soon as they are received.
- C. Aggregation mode requires two FortiAnalyzer devices.
- D. Forwarding mode forwards logs to other FortiAnalyzer devices syslog servers, or CEF servers.
正解：C、D
質問 # 33
What are offline logs on FortiAnalyzer?
- A. Real-time logs that are not yet indexed
- B. Compressed logs, also known as archive logs
- C. Logs that are indexed and stored in the SQL database
- D. Any logs collected from offline devices after they boot up
正解：D
解説：
These logs are generated when devices that were previously offline come back online and send their log data to the FortiAnalyzer.
質問 # 34
What must you consider when using log fetching? (Choose two.)
- A. The archive logs retrieved from the server become archive logs in the client.
- B. The fetching profile must include a user with the Super_User profile.
- C. The fetch client can retrieve logs from devices that are not added to its local Device Manager
- D. You can use filters to include only logs from a single device.
正解：B、D
質問 # 35
Which two statements about creating ADOMs are true1? (Choose two.)
- A. Disk quotas can be defined per device inside the ADOM.
- B. An administrator with the default standard_User profile can create ADOMs.
- C. FortiAnalyzer creates default ADOMs when ADOMs are enabled.
- D. The ADOM type you create must match the device type you are planning to add.
正解：C、D
質問 # 36
What is required to authorize a FortiGate on FortiAnalyzer using Fabric authorization?
- A. Valid FortiAnalyzer credentials
- B. A pre-shared key
- C. The FortiGate serial number
- D. A FortiGate ADOM
正解：A
解説：
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 93: The fourth method uses the Fortinet Security Fabric authorization process. This method requires that both FortiGate and FortiAnalyzer are running version 7.0.1 or higher. It is also required that the FortiGate administrator has valid credentials to log in on FortiAnalyzer and complete the registration.
https://docs.fortinet.com/document/fortianalyzer/7.2.1/administration-guide/13897/adding-a-fortigate-using-security-fabric-authorization
質問 # 37
Which FortiAnalyzer feature allows you to use a proactive approach when managing your network security?
- A. Threat hunting
- B. Incidents dashboards
- C. Outbreak alert services
- D. FortiView Monitor
正解：C
解説：
FortiAnalyzer_7.0_Study_Guide-Online.pdf page 217: Threat hunting consists in proactively searching for suspicious or potentially risky network activity in your environment. The proactive approach will help administrator find any threats that might have eluded detection by the current security solutions or configurations.
質問 # 38
Which statement about the FortiSIEM management extension is correct?
- A. Allows you to manage the entire life cycle of a threat or breach.
- B. It requires a licensed FortiSIEM supervisor.
- C. It can be installed as a dedicated VM.
- D. Its use of the available disk space is capped at 50%.
正解：A
質問 # 39
What is the purpose of a dataset query in FortiAnalyzer?
- A. It sorts log data into tables
- B. It extracts the database schema
- C. It injects log data into the database
- D. It retrieves log data from the database
正解：D
質問 # 40
You are trying to initiate an authorization request from FortiGate to FortiAnalyzer, but the Security Fabric window does not open when you click Authorize.
Which two reasons can cause this to happen? (Choose two.)
- A. The fabric authorization settings on FortiAnalyzer are misconfigured.
- B. The management computer does not have connectivity to the authorization IP address and port combination.
- C. The Security Fabric root is unauthorized and needs to be added as a trusted host.
- D. A pre-shared key needs to be established on both sides.
正解：A、B
解説：
B . The management computer does not have connectivity to the authorization IP address and port combination. If the FortiGate cannot reach the FortiAnalyzer on the configured IP address and port (typically HTTPS), the authorization request will fail. This could be due to firewall rules, routing issues, or incorrect configuration.
D . The fabric authorization settings on FortiAnalyzer are misconfigured. FortiAnalyzer needs to be properly configured to accept authorization requests. This includes settings like enabling Security Fabric and configuring the correct authorization method.
質問 # 41
Which two purposes does the auto cache setting on reports serve? (Choose two.)
- A. It reduces the log insert lag rate.
- B. It reduces report generation time.
- C. It automatically updates the hcache when new logs arrive.
- D. It provides diagnostics on report generation time.
正解：B、C
解説：
Reference:
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/384416/how-auto-cache-works
https://docs.fortinet.com/document/fortianalyzer/6.2.5/administration-guide/86926/enabling-auto-cache
質問 # 42
Which two statement are true regardless initial Logs sync and Log Data Sync for Ha on FortiAnalyzer?
- A. With initial Logs Sync, when you add a unit to an HA cluster, the primary device synchronizes its logs with the backup device.
- B. By default, Log Data Sync is disabled on all backup devise.
- C. Log Data Sync provides real-time log synchronization to all backup devices.
- D. When Logs Data Sync is turned on, the backup device will reboot and then rebuilt the log database with the synchronized logs.
正解：A、C
質問 # 43
Which two settings must you configure on FortiAnalyzer to allow non-local administrators to authenticate on FortiAnalyzer with any user account in a single LDAP group? (Choose two.)
- A. LDAP servers IP addresses added as trusted hosts
- B. An administrator group
- C. One or more remote LDAP servers
- D. A local wildcard administrator account
正解：C、D
解説：
A wildcard administrator account allows any user from the specified LDAP group to authenticate, and the remote LDAP servers must be configured to validate those user credentials. The combination of these settings enables authentication via LDAP for non-local users.
質問 # 44
......
FCP_FAZ_AD-7.4問題集と練習テスト（180試験問題)：https://www.passtest.jp/Fortinet/FCP_FAZ_AD-7.4-shiken.html
リリースFortinet FCP_FAZ_AD-7.4更新された問題PDF：https://drive.google.com/open?id=1KuDywzxffmim-DvyLaEW7MkxYgGaNJoa