Fortinet NSE 6 - FortiSOAR 7.3 Administrator (NSE6_FSR-7.3) Free Practice Test

Question 1

What are three protocols that a Level 3 analyst must adhere to when developing a new SOC alert handling technique? (Choose three.)

A. The analyst must identify the compromised indicators.

B. The analyst must update documentation to establish procedures for this type of incident.

C. The analyst must build SIEM rules or SOAR playbooks so that such incidents can be identified and indicators can be enriched.

D. The analyst must be able to assign roles to teams based on their requirements.

E. The analyst must be able to escalate alerts to incidents.

Correct Answer: A,B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit. Which FortiSOAR deployment model is shown in the exhibit?

A. Multi-tenant shared architecture

B. Multi-tenant distributed architecture

C. Multi-tenant hybrid architecture

D. Enterprise architecture

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Which CLI command will not work when the PostgreSQL database on FortiSOAR is externalized?

A. csadm ha export-conf

B. csadm ha takeover

C. csada ha firedrill

D. csadmin ha show-health --all-nodes

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

A playbook extracts an IP address and stores it in a variable. A later step references this variable, but the value is always empty during execution. The variable name appears correct.
What is the MOST likely issue?

A. The variable mapping used the wrong data path from the previous step

B. The connector does not support IP inputs

C. The playbook was not saved before execution

D. The variable was defined as global instead of local

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

When configuring the system proxy on FortiSOAR. which two URLs should be accessible from the proxy server? (Choose two.)

A. https://globalupdate.fortinet.net

B. https://licensing.fortinet.net

C. https://fortiguard.com

D. https://iepo.fortisoar.fortinet.com

Correct Answer: A,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

During the installation phase of a FortiSOAR deployment, which three ports need to be open for outbound connections? (Choose three.)

A. Port 25

B. Port 443

C. Port 23

D. Port 80

E. Port 22

Correct Answer: B,D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

On FortiSOAR. which default role is used to assign privileges to other teams and is recommended to not be removed?

A. Application Administrator

B. Full App Permissions

C. Security Administrator

D. Playbook Administrator

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

What are two system-level logs that can be purged using application configuration? (Choose two.)

A. Executed Playbook logs

B. Reporting logs

C. Connector logs

D. Audit togs

Correct Answer: A,D

Welcome to TestSimulate

Fortinet NSE 6 - FortiSOAR 7.3 Administrator (NSE6_FSR-7.3) Free Practice Test