● Fortinet NSE 6 - FortiSOAR 7.3 Administrator Exam Materials
The Actual questions for NSE 6 - FortiSOAR 7.3 Administrator Actual Exam Materials (NSE6_FSR-7.3) - Updated Weekly
Question #1
Question #2
Which two roles are default roles configured on FortiSOAR? (Choose two answers)
- A. T1 Analyst
- B. T3 Analyst
- C. FortiSOAR Agent
- D. Connector Administrator
Question #3
When configuring an HA cluster with an externalized PostgreSQL database, you need to add all the nodes to the allowlist of which configuration file? (Choose one answer)
- A. db_config.yml
- B. postgresql.conf
- C. pg_hba.conf
- D. export-conf
Question #4
What two permissions must you assign to a user to allow the purge of audit logs for all users? (Choose two answers)
- A. Delete permission on the Security module
- B. Delete permission on the Audit Log Activities module
- C. Delete permission on the People module
- D. Delete permission on the Users module
Question #5
Which statement about licensing on FortiSOAR is true? (Choose one answer)
- A. A FortiSOAR VM with a perpetual license needs access to update.fortiguard.net.
- B. The subscription license requires connectivity to globalupdate.fortinet.net to retrieve information.
- C. The perpetual trial license has a limit on actions per day but no limit on user count.
- D. The evaluation license has an expiry date but no limit on user count.
Question #6
Which three features are installed with the FortiSOAR Incidence Response Content Pack? (Choose three answers)
- A. System monitoring connectors
- B. Sample data for playbooks
- C. Sample alerts and incidents
- D. System playbooks
- E. SLA template module
Question #7
Refer to the exhibit.
Why is this user's account inactive?
(Choose one answer)
- A. The user has exceeded the maximum number of authentication tries for a one-hour period
- B. The user does not have a valid email ID for the account.
- C. The user has not reset the password for the account.
- D. The user has exceeded the maximum number of allowed user accounts.
Question #8
An administrator is issuing the following command on a node trying to join a FortiSOAR cluster as a standby:
csadm ha join-cluster --status active --role secondary --primary-node 10.0.1.160
The node fails to join the cluster.
What is the issue?
(Choose one answer)
- A. The primary node needs to be resolvable via FQDN.
- B. The IP address should be for secondary node instead of primary node.
- C. The role value should be worker.
- D. The status value should be passive.
Question #9
Which playbook collection includes system-level playbooks that FortiSOAR uses to auto-populate date fields when the status of incident or alert records changes to Resolved or Closed? (Choose one answer)
- A. SLA Management Playbooks
- B. Approval/Manual Task Playbooks
- C. Schedule Management Playbooks
- D. Utilities Playbooks
Question #10
Which two statements about upgrading a FortiSOAR HA cluster are true? (Choose two answers)
- A. Nodes can be upgraded while the primary node or secondary node are in the HA cluster.
- B. It is recommended that the passive secondary node be upgraded first, and then the active primary node
- C. Upgrading a FortiSOAR HA cluster requires no downtime.
- D. The upgrade procedure for an active-active cluster and an active-passive cluster are the same.
Which two statements about FortiSOAR virtual instance deployment requirements are true? (Choose two answers)