NSE 7 - Security Operations 7.6 Architect Materials - Question #47 Discussion

Refer to the exhibit. The input of a FortiSIEM connector action is shown. You want to create a playbook on FortiSOAR that allows you to accomplish the following: Manually input an IP address. Use the connector action in the exhibit to retrieve a device from the FortiSIEM configuration management database (CMDB) with that IP address. Ask the SOC manager to review the information pulled from FortiSIEM about that device. If the manager approves, an asset record is created. Which combination and order of step operations fulfills the requirements with the fewest required playbook steps? (Choose one answer)

• A. Manual trigger, 2) Connector action, 3) Approval, 4) Create Record
• B. Connector action, 2) Approval, 3) Create record, 4) Update record
• C. Manual trigger, 2) Set Variable, 3) Connector action, 4) Set Variable, 5) Approval, 6) Create record
• D. On Create trigger, 2) Connector action, 3) Manual Task, 4) Create record

Brave-Dump Community Votes