Refer to the exhibits. Which observation about this FortiAnalyzer Fabric deployment architecture is true?

The correct answer is A. The AMER HQ SOC team cannot run automation playbooks from the Fabric supervisor. In a multi‑tier Fabric deployment the supervisor node cannot push configuration changes or invoke automation playbooks on its member nodes - automation must be run locally on each member, not centrally from the supervisor.

FortiAnalyzer for SOC

Question

Exhibit

Options

AThe AMER HQ SOC team cannot run automation playbooks from the Fabric supervisor.
BThe AMER HQ SOC team must configure high availability (HA) for the supervisor node.
CThe EMEA SOC team has access to historical logs only.
DThe APAC SOC team has access to FortiView and other reporting functions.

How the community answered

(27 responses)

A
67% (18)
B
11% (3)
C
4% (1)
D
19% (5)

Explanation

In a multi‑tier Fabric deployment the supervisor node cannot push configuration changes or invoke automation playbooks on its member nodes - automation must be run locally on each member, not centrally from the supervisor.

Topics

#FortiAnalyzer Fabric#supervisor node#automation playbooks#SOC team access

Community Discussion

No community discussion yet for this question.

Full NSE7_SOC_AR-7.6 Practice