Exam NSE7_OTS-6.4 topic 1 question 23 discussion

Actual exam question from Fortinet's NSE7_OTS-6.4

Question #: 23
Topic #: 1

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

A. You must set correct operator in event handler to trigger an event.
B. You can automate SOC tasks through playbooks.
C. Each playbook can include multiple triggers.
D. You cannot use Windows and Linux hosts security events with FortiSoC.

Show Suggested Answer

Suggested Answer: AB 🗳️

by downlife at Nov. 25, 2022, 3:08 p.m.

Comments

Submit Cancel

azjlmpang

7 months, 2 weeks ago

Selected Answer: AB

Playbook can only include one trigger.

upvoted 1 times

...

Spippolo

1 year, 3 months ago

Selected Answer: AB

Pag. 128 – Study Guide | NSE7 OT 6.4 Each playbook can include only one trigger Pag. 198 – Study Guide | NSE7 OT 6.4 You can set automated responses for OT security events using playbooks.

upvoted 1 times

...