FCP FortiAnalyzer 7.4 study guide
FCP FortiAnalyzer 7.4 · Work through your exam, one topic at a time.
The FCP FortiAnalyzer 7.4 credential sits within the Fortinet Certified Professional track, the mid-tier of the Fortinet Training Institute Certification Program named on Fortinet's corporate site. It is aimed at security operations staff who deploy, run, and get analytical value out of FortiAnalyzer: SOC analysts, network security engineers, and administrators responsible for log retention, reporting, and investigation in Fortinet environments. The exam is expected to span four areas: deployment and system configuration (device registration, HA, administrative access, storage); log collection, parsing, and storage (log forwarding, ADOMs, log types, retention and disk management); reports and report management (datasets, charts, layouts, schedules, output profiles); and incident investigation, events, and automation (event handlers, incidents, playbooks). Candidates typically prepare with Fortinet Training Institute self-paced and instructor-led FortiAnalyzer courses, the free training and on-demand labs Fortinet advertises, and hands-on practice in a lab with FortiGate devices forwarding logs. The FCP FortiAnalyzer 7.4 study guide has 4 sections and about 1,766 words.
01Deployment and System Configuration
Deployment and System Configuration is the foundation domain: it tests whether you can design a FortiAnalyzer 7.4 deployment, partition it with ADOMs, register devices correctly, and put HA and system services in place before troubleshooting logs. Questions often present a topology or a registration failure and ask for the first correct action.
476 words, about 2 min02Log Collection, Parsing, and Storage
Log Collection, Parsing, and Storage tests the path from a FortiGate or syslog source to a searchable, retained log on FortiAnalyzer 7.4. You need to know the transport, the parser, the storage policy, and what happens when disk fills.
425 words, about 2 min03Reports and Report Management
Reports and Report Management tests whether you can turn stored logs into repeatable, scheduled output in FortiAnalyzer 7.4. The exam expects you to know the building blocks: datasets, report templates, charts, output profiles, and schedules, and to diagnose an empty or failed report.
449 words, about 2 min04Incident Investigation, Events, and Automation
Incident Investigation, Events, and Automation tests the operational layer: finding the evidence, detecting the condition, and responding consistently. In FortiAnalyzer 7.4, that means FortiView and Log View for investigation, event handlers for detection, and automation actions for response.
416 words, about 2 min