Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Fortinet
Exam Format
Registration
Validity
Skills this practice test covers
- Perform the initial setup, licensing and FortiCare registration of a FortiAnalyzer.
- Build an HA cluster and manage RAID on a hardware FortiAnalyzer.
- Register devices and troubleshoot why their logs stop arriving.
- Search logs in Log View and build reports from templates and datasets.
- Run ADOMs with disk quotas and the right administrator profiles.
- Back up the FortiAnalyzer configuration and set log archiving.
Explore related topics
FCP-FAZ-AD-7-4 exam content
4 domains · 12 topics · 190 of 411 questions are written for FCP-FAZ-AD-7-4
System Configuration65 questions
This domain covers getting a FortiAnalyzer ready for work. Candidates perform the initial setup and licensing, build a high availability cluster, manage RAID on hardware models, and explain the FortiAnalyzer architecture and its place in the Security Fabric.
Skills tested
- Set up interfaces, system time and administrative access on a new FortiAnalyzer.
- Apply a license and register the unit with FortiCare.
- Configure an HA cluster and check that its members stay in sync.
- Choose a RAID level for a hardware unit and recover from a failed disk.
- Explain how Analyzer and Collector modes share the work in a distributed deployment.
Questions by topic
- Manage RAID17
- Manage High Availability17
- Describe FortiAnalyzer concepts15
- Perform Initial Configuration16
Device Management35 questions
FortiAnalyzer is only useful when devices send it logs. This domain covers registering and authorizing devices, placing them in ADOMs, and fixing devices that stop sending logs.
Skills tested
- Register and authorize FortiGate devices in Device Manager.
- Assign devices to the right ADOM and check their log status.
- Troubleshoot connectivity, registration and log upload problems with diagnostic tools.
Questions by topic
- Troubleshoot device communication issues18
- Manage devices17
Logs and Reports Management40 questions
This domain is about the data itself. Candidates search logs in Log View, set storage, retention and archiving, forward logs to other systems, and build reports from templates, datasets and charts.
Skills tested
- Search and filter logs in Log View.
- Set log storage and retention, and forward logs to an external system.
- Write an SQL dataset and use it in a custom chart.
- Create a report from a template, then schedule it and send it by email.
Questions by topic
- Manage reports19
- Manage log data20
- Describe FortiAnalyzer concepts1
Administration50 questions
This domain covers who can do what on FortiAnalyzer and how its data is protected. Candidates manage administrator accounts and profiles, enable and run ADOMs, set disk quotas, and back up the system.
Skills tested
- Create administrator accounts with profiles, and connect RADIUS, LDAP or SAML authentication.
- Enable ADOMs and choose the ADOM mode that fits the devices.
- Set ADOM disk quotas so that one ADOM cannot fill the disk.
- Back up the system configuration and restore it.
Questions by topic
- Configure administrative access17
- Manage administrative domains (ADOMs)17
- Manage disk quota and backups16
Requirements
- No formal prerequisites: anyone can book the exam.
- Required for FCP in Network Security: the core FCP - FortiGate 7.4 Administrator exam as well, within two years of this one.
- Recommended: the knowledge taught in Fortinet's FortiGate Operator course.
- Recommended: experience with network security concepts and with log management.
About the FCP-FAZ-AD-7-4 exam
FCP-FAZ-AD-7-4 covers the setup and daily running of FortiAnalyzer 7.4, for the administrators who look after it. FortiAnalyzer collects logs from FortiGate and other Fortinet devices and turns them into searches and reports. The exam asks about initial configuration, high availability, RAID, device registration, administrative domains (ADOMs), disk quotas and backups. The separate FCP - FortiAnalyzer 7.4 Analyst exam covers investigating the logs. Passing this one counts as an elective toward the Fortinet Certified Professional (FCP) in Network Security.
System Configuration has the most questions in the PlanetCert practice test, followed by Administration. The explanations help most where settings sound alike, such as an ADOM's disk quota and its log storage policy, or the Analyzer and Collector modes. Study Mode suits device troubleshooting, where the right answer depends on reading the symptom closely. Brainy AI Assistant can explain why a FortiGate shows as unauthorized, or how a dataset query feeds a report chart.
How to earn the certification
- Earns
- Fortinet Certified Professional (FCP) in Network Security, as an elective examProfessional
FCP in Network Security is valid for two years from the exam date.
- After
- FCSS-EFW-AD-7-4 FCSS - Enterprise Firewall 7.4 Administrator
A step up in the network security track. This Fortinet Certified Solution Specialist (FCSS) exam covers enterprise firewalls.
- FCSS-EFW-AD-7-4 FCSS - Enterprise Firewall 7.4 Administrator
How to prepare for FCP-FAZ-AD-7-4
- 1
Pin the study plan to 7.4
This practice test follows the 7.4 objectives. Before planning study time, confirm that the booking page lists FCP-FAZ-AD-7-4, and run the lab on FortiAnalyzer 7.4 so that the menus match the questions.
- 2
Pair a FortiGate VM with FortiAnalyzer
Register a FortiGate VM with a FortiAnalyzer VM, authorize it in Device Manager and watch the logs arrive. Then break the link on purpose, for example with a wrong IP address, and fix it.
- 3
Give system setup the most hours
System Configuration has the most questions in the practice test. Build an HA pair and read its status, then choose RAID levels on paper for a few cases, such as a unit that must survive two failed disks.
- 4
Split one unit into two ADOMs
Enable ADOMs, create two, assign a device to each and give each a disk quota. Add an administrator who can see only one ADOM, then back up the configuration.
- 5
Build one report, then time a run
Copy a report template, add a chart from an SQL dataset and schedule the report by email. Finish with a Timed Mode run of the practice test, and ask Brainy AI Assistant about every missed HA or ADOM question.
Start a timed FCP-FAZ-AD-7-4run
Fortinet's FortiAnalyzer 7.4 Administrator course follows this exam, and its FortiGate Operator course covers the background it assumes.
Who FCP-FAZ-AD-7-4 is for
- Network and security administrators who deploy and run FortiAnalyzer for their organization.
- SOC analysts who rely on FortiAnalyzer logs and want to manage the platform itself.
- FCP in Network Security candidates who choose FortiAnalyzer as their elective.
- Managed service staff who split one FortiAnalyzer between customers with ADOMs.
Typical job titles: Network security administrator · Security engineer · SOC analyst · Network administrator · FortiAnalyzer administrator
FCP-FAZ-AD-7-4 glossary
16 terms from the exam objectives and the vendor's official material, each defined in a sentence.
- Administrative Domains (ADOMs)
- Separate areas in FortiAnalyzer, each with its own devices, logs and administrators, used to split one unit between teams or customers.
- ADOM modes
- Normal mode keeps all the VDOMs of one FortiGate in the same ADOM; Advanced mode lets them go to different ADOMs.
- Analytics database
- The SQL database where FortiAnalyzer indexes recent logs, so they can be searched quickly and used in reports.
- Datasets
- SQL queries that pull log data from the database for use in report charts.
- Device Manager
- The FortiAnalyzer pane that lists registered devices, where new devices are authorized and assigned to an ADOM.
- Disk quota
- The share of the unit's storage that an ADOM may use for its logs.
- FortiCare
- Fortinet's support service and portal, where each unit is registered to activate its support contract and updates.
- Heartbeat interfaces
- The interfaces HA members use to check that their peers are alive and to keep data in sync.
- High availability (HA)
- A cluster of FortiAnalyzer units that keep logs and settings in sync, so another member can take over if one fails.
- Hot spare
- A standby disk in a RAID array that the controller uses at once to rebuild data when another disk fails.
- Log archiving
- Keeping older logs in compressed form for long-term storage, apart from the indexed logs used for searches and reports.
- Log forwarding
- Sending copies of the logs FortiAnalyzer receives to another system, such as a syslog server or another FortiAnalyzer.
- Log View
- The FortiAnalyzer pane for browsing and searching the logs that devices send, with filters by field and time.
- Macros
- Report elements that show a single value from a dataset, such as a total, inside the report text.
- Report templates
- Ready-made report layouts that set which charts and sections a report contains.
- Security Fabric
- Fortinet's framework that links its products, such as FortiGate and FortiAnalyzer, so they share data and act together.
Related practice tests
- FCP-PCS-7.4FCP - Public Cloud Security 7.4 Administrator
- FCP-FML-AD-7-4FCP - FortiMail 7.4 Administrator
- FCP-FWB-AD-7-4FCP - FortiWeb 7.4 Administrator
- FCP-FMG-AD-7-6Fortinet FCP - FortiManager 7.6 Administrator
- FCSS-SASE-AD-25Fortinet FCSS - FortiSASE 25 Administrator