Refer to the exhibit. The playbook shown in the exhibit requires fine-tuning. A task needs to be configured to run a report on the updated asset list that the FortiAnalyzer receives from the…

The correct answer is B. SOC engineer. Modifying or extending playbooks - such as adding tasks to run reports - is the responsibility of the SOC engineer, who manages automation workflows, integrations, and system configurations within FortiAnalyzer.

SOC Operations

Question

Refer to the exhibit. The playbook shown in the exhibit requires fine-tuning. A task needs to be configured to run a report on the updated asset list that the FortiAnalyzer receives from the FortiClient EMS. Which SOC role is responsible for making this change?

Exhibit

Options

AThreat hunter
BSOC engineer
CSecurity analyst
DIncident responder

How the community answered

(38 responses)

B
95% (36)
C
3% (1)
D
3% (1)

Explanation

Modifying or extending playbooks - such as adding tasks to run reports - is the responsibility of the SOC engineer, who manages automation workflows, integrations, and system configurations within FortiAnalyzer.

Topics

#SOC engineer#SOC roles#playbook management#FortiClient EMS

Community Discussion

No community discussion yet for this question.

Full FCP_FAZ_AN-7.6 Practice