ExamGecko
Login
Home / Fortinet / FCSS_SOC_AN-7.4 / List of questions
Ask Question

Fortinet FCSS_SOC_AN-7.4 Practice Test - Questions Answers, Page 4

Add to Whishlist

List of questions

Question 31

Report Export Collapse

Which three end user logs does FortiAnalyzer use to identify possible IOC compromised hosts? (Choose three.)

Become a Premium Member for full access
  Unlock Premium Member

Question 32

Report Export Collapse

Which role does a threat hunter play within a SOC?

Become a Premium Member for full access
  Unlock Premium Member
Total 32 questions
Go to page: of 4
Open VPLUS File
Convert VPLUS to PDF

Related questions

Which role does a threat hunter play within a SOC?
Refer to the exhibits. What can you conclude from analyzing the data using the threat hunting module?
Which two ways can you create an incident on FortiAnalyzer? (Choose two.)
Refer to the exhibit. Assume that all devices in the FortiAnalyzer Fabric are shown in the image. Which two statements about the FortiAnalyzer Fabric deployment are true? (Choose two.)
Refer to the exhibits. The Malicious File Detect playbook is configured to create an incident when an event handler generates a malicious file detection event. Why did the Malicious File Detect playbook execution fail?
Refer to the exhibit, which shows the partial output of the MITRE ATT&CK Enterprise matrix on FortiAnalyzer. Which two statements are true? (Choose two.)
Refer to Exhibit: You are tasked with reviewing a new FortiAnalyzer deployment in a network with multiple registered logging devices. There is only one FortiAnalyzer in the topology. Which potential problem do you observe?
Refer to the exhibits. The DOS attack playbook is configured to create an incident when an event handler generates a denial-of-ser/ice (DoS) attack event. Why did the DOS attack playbook fail to execute?
Refer to the exhibit. Which two options describe how the Update Asset and Identity Database playbook is configured? (Choose two.)
A customer wants FortiAnalyzer to run an automation stitch that executes a CLI command on FortiGate to block a predefined list of URLs, if a botnet command-and-control (C&C) server IP is detected. Which FortiAnalyzer feature must you use to start this automation process?