NSE 7 - Security Operations 7.6 Architect Materials - Question #67 Discussion

You want to automate a workflow on FortiSOAR so that whenever an incident is moved to the aftermath phase, it is automatically set to status resolved and assigned to a purple team specialist as incident lead to write an incident report. In addition, a manual task, assigned to the same specialist, will be created so they are aware of the pending work. Which three steps will accomplish this task? (Choose three answers)

• A. Create a Find Record step to find matching incidents.
• B. Create a Condition step to assign both the incident and task to the specialist.
• C. Create a Manual Task step to assign the task to the specialist.
• D. Create an Update Record step to set the incident lead.
• E. Create an On Update trigger with a trigger condition that matches the aftermath phase.

Brave-Dump Community Votes