ExamTopics Logo
Mail Us[email protected]
Menu
Fortinet Discussions
exam questions

Exam NSE7_OTS-6.4 All Questions

View all questions & answers for the NSE7_OTS-6.4 exam
Go to Exam

Exam NSE7_OTS-6.4 topic 1 question 23 discussion

Actual exam question from Fortinet's NSE7_OTS-6.4
Question #: 23
Topic #: 1
[All NSE7_OTS-6.4 Questions]

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

  • A. You must set correct operator in event handler to trigger an event.
  • B. You can automate SOC tasks through playbooks.
  • C. Each playbook can include multiple triggers.
  • D. You cannot use Windows and Linux hosts security events with FortiSoC.
Show Suggested Answer Hide Answer
Suggested Answer: AB 🗳️
by downlife at Nov. 25, 2022, 3:08 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
azjlmpang
2 months, 2 weeks ago
Selected Answer: AB
Playbook can only include one trigger.
upvoted 1 times
...
Spippolo
10 months, 2 weeks ago
Selected Answer: AB
Pag. 128 – Study Guide | NSE7 OT 6.4 Each playbook can include only one trigger Pag. 198 – Study Guide | NSE7 OT 6.4 You can set automated responses for OT security events using playbooks.
upvoted 1 times
...
cciesam
11 months, 2 weeks ago
Selected Answer: AB
Ans: AB
upvoted 1 times
...
Jbeaulieu
1 year, 1 month ago
Selected Answer: AB
A & B study guide, page 198
upvoted 1 times
...
downlife
1 year, 1 month ago
Selected Answer: AB
A and B each playbook can only include one trigger
upvoted 2 times
froui
7 months, 2 weeks ago
totally agree
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago