View all questions & answers for the NSE 7 - Security Operations 7.6 Architect Materials exam

NSE 7 - Security Operations 7.6 Architect Materials - Question #18 Discussion

Comment Image Comment Image Comment Image
Question Diagram

Using the default data ingestion wizard in FortiSOAR, place the incident handling workflow from FortiSIEM to FortiSOAR in the correct sequence. Select each workflow component in the left column, hold and drag it to a blank position in the column on the right. Place the four correct workflow components in order, placing the first step in the first position at the top of the column. Once you place a workflow component, you can move it again if you want to change your answer before moving to the next question. You need to drop four workflow components in the work area. Select and drag the screen divider to change the viewable area of the source and work areas. (Choose four answers)

  • A. Step 1: FortiSIEM event log
  • B. Step 2: FortiSIEM Incident
  • C. Step 3: FortiSOAR alert
  • D. Step 4: FortiSOAR Incident
Correct Answer: A,B,C,D

Brave-Dump Community Votes

Answer: A, B, C, D (2 votes) 66.67%
Answer: D (1 vote) 33.33%

Community Explanations & Comments (3)

Brave-Dumps.com Admin 1 year ago
Selected: A, B, C, D
This is a drag-and-drop question, so the answer options should not be available. Please check the correct answers inside the question rectangle instead.
Wellknown 11 months ago
Selected: D
FortiSIEM event log --> FortiSIEM Incident --> FortiSOAR alert --> FortiSOAR Incident
Simon Cliffe 8 months ago
Selected: A, B, C, D
Raw events > Correlated to an incident > SOAR alert > converts to Incident for Investigation