NSE7_OTS-7.2 · Question #8
An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network. Which two statements are true…
The correct answer is A. You must set correct operator in event handler to trigger an event. B. You can automate SOC tasks through playbooks. You must choose the proper operator in an event handler so the event actually fires, and playbooks let you automate SOC tasks (response actions) on FortiAnalyzer.
Question
An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network. Which two statements are true about FortiSoC and SOAR features on FortiAnalyzer? (Choose two.)
Options
- AYou must set correct operator in event handler to trigger an event.
- BYou can automate SOC tasks through playbooks.
- CEach playbook can include multiple triggers.
- DYou cannot use Windows and Linux hosts security events with FortiSoC.
How the community answered
(58 responses)- A76% (44)
- C16% (9)
- D9% (5)
Explanation
You must choose the proper operator in an event handler so the event actually fires, and playbooks let you automate SOC tasks (response actions) on FortiAnalyzer.
Topics
Community Discussion
No community discussion yet for this question.