Fortinet Updated FCP_FAZ_AD-7.4 Exam Questions and Answers by ben

C. One or more remote LDAP servers: FortiAnalyzer needs to be configured to communicate with your external LDAP server where the user accounts and groups reside. This involves setting up the LDAP server address, port, and authentication details.

B. An administrator group: You need to create an administrator group on FortiAnalyzer and link it to the specific LDAP group that contains the users you want to grant administrative access. This allows any user within that LDAP group to authenticate and have the permissions assigned to the administrator group on FortiAnalyzer.

This configuration allows FortiAnalyzer to authenticate users against the external LDAP server and authorize them based on their membership in the designated LDAP group. This way, you don't need to create individual local accounts for each administrator, simplifying user management and centralizing authentication.

In the case of a primary device failure, FortiAnalyzer HA uses the following rules to select a new primary:

• All cluster devices are assigned a priority from 80 to 120. The default priority is 100. If the primary device

becomes unavailable, the device with the highest priority is selected as the new primary device. For

example, a device with a priority of 110 is selected over a device with a priority of 100.

• If multiple devices have the same priority, the device whose primary IP address has the greatest value is

selected as the new primary device. For example, 123.45.67.124 is selected over 123.45.67.123.

• If a new device with a higher priority or a greater value IP address joins the cluster, the new device does

not replace (or pre-empt) the current primary device automatically.

FortiAnalyzer_7.0_Study_Guide-Online page 62