FCSS_SOC_AN-7.4 試験問題を無料オンラインアクセス

Which two types of variables can you use in playbook tasks? (Choose two.)

• A.input
• B.Create
• C.Trigger
• D.Output

Refer to Exhibit:

A SOC analyst is creating the Malicious File Detected playbook to run when FortiAnalyzer generates a malicious file event. The playbook must also update the incident with the malicious file event data.
What must the next task in this playbook be?

• A.A local connector with the action Run Report
• B.A local connector with the action Attach Data to Incident
• C.A local connector with the action Update Asset and Identity
• D.A local connector with the action Update Incident

What is a key consideration when managing playbook templates for SOC automation?

• A.The color coordination of playbook interfaces
• B.The comprehensiveness and adaptability of the templates
• C.The entertainment value of playbook simulations
• D.The popularity of templates among SOC analysts

Refer to the exhibit.

Assume that all devices in the FortiAnalyzer Fabric are shown in the image.
Which two statements about the FortiAnalyzer Fabric deployment are true? (Choose two.)

• A.FAZ-SiteA has two ADOMs enabled.
• B.All FortiGate devices are directly registered to the supervisor.
• C.FortiGate-B1 and FortiGate-B2 are in a Security Fabric.
• D.There is no collector in the topology.

Review the following incident report.

Which two MITRE ATT&CK tactics are captured in this report? (Choose two.)

• A.Defense Evasion
• B.Execution
• C.Priviledge Escalation
• D.Reconnaissance