Exam NSE7_ADA-6.3 topic 1 question 6 discussion

A. Aggregate logs from distributed systems: FortiSOAR can help aggregate logs from various distributed systems, providing a centralized platform for monitoring and analysis. This enhances visibility and simplifies the detection and response process. D. Reduce human error: FortiSOAR automates repetitive tasks and workflows, reducing the chances of human error in the security operations process. By automating routine tasks, it frees up analysts to focus on more critical security issues. E. Address analyst skills gap: FortiSOAR can provide guidance, playbooks, and automation that help bridge the gap between junior and senior analysts. By standardizing processes and providing support for less experienced analysts, it can improve overall effectiveness and efficiency in the SOC.

The correct answer should be ABE

I thnink ADE is the correct

I am not sure where to review this in the study guide, so I cannot provide the final answer. However, with reference to FortiSOAR study guide page 7 and following: a) seems wrong, because FortiSOAR does not collect logs, but alerts/incidents b) seems correct, because it is a central ticketing system enabling to research on past alerts (instead of distributed one) c) seems wrong, because FortiSOAR does not perform AI/baseline investigation (this is done by the other system like FortiSIEM, SOAR only looks at the resulting alerts) d) seems correct, because playbooks and automated response result in less errors e) seems partially correct, because you need less analysts for more tasks deploying FortiSOAR. Skills are, however, still required