Which CLI command will not work when the PostgreSQL database on FortiSOAR is externalized?

csadmin ha show-health ---all-nodes

Several users have informed you that the FortiSOAR GUI Is not reachable. When troubleshooting, which step should you take first?

Enter the systemct1 status nginx command to gather more information.

Enter the csadm license --show-details command to check if there is a duplicate license.

Enter the csadm services --restart ngiax command to restart only the Nginx process.

Enter the systemct1 status nginx command to gather more information.

Review the connecters.log file to see what is happening to the HTTPS connections.

Refer to the exhibit. Which two statements about the recommendation engine are true? (Choose two.)

The dataset is trained to predict the Severity and Type fields.

The alert severity is High, but the recommendation is for it to be set to Medium

There are no playbooks that can be run on the recommended alerts using the recommendation panel

The dataset is trained to predict the Severity and Type fields.

The recommendation engine is set to automatically accept suggestions.

The alert severity is High, but the recommendation is for it to be set to Medium

Refer to the exhibit. When importing modules to FortiSOAR using the configuration wizard, what actions are applied to fields it you select Merge with Existing as the Bulk action?

Existing fields are overwritten, new fields are added, and non-Imported fields are kept.

Existing fields are kept, new fields are added, and non-imported fields are deleted.

Existing Holds are overwritten, now fields are added, and non-imported fields are deleted.

Existing fields are kept, new fields are added, and non-imported fields are kept.

Existing fields are overwritten, new fields are added, and non-Imported fields are kept.

A security analyst has reported unauthorized access to System Configuration. You must review the user's current level of access, and then restrict their access according to your organization's requirements. As part of your auditing process, which two actions should you perform? (Choose two.)

View the user's effective role permissions, and then investigate which role is providing that access.

Review the user's learn hierarchy to ensure that the appropriate relationships are configured.

Remove the create, read, update, and delete (CRUD) permissions or roles that the user does not require.

View the user's effective role permissions, and then investigate which role is providing that access.

Remove all record ownership that is assigned to the user.

Review the user's learn hierarchy to ensure that the appropriate relationships are configured.

An administrator is issuing the following command on a node trying to join a FortiSOAR duster as a standby: csadm ha join-cluster --status active ---role secondary --primary-node 10.0.1.160The node fails to join the cluster. What is the issue?

The status value should be passive.

The role value should be worker.

The primary node needs to be resolvable via FQDN.

The IP address should be for secondary-node Instead of primary-node.

The status value should be passive.

Which two statements about upgrading a FortiSOAR HA cluster are true7 (Choose two.)

The upgrade procedure for an active-active cluster and an active-passive cluster are the same.

It is recommended that the passive secondary node be upgraded first, and then the active primary node.

Nodes can be upgraded while the primary node or secondary node are in the HA cluster.

Upgrading a FortiSOAR HA cluster requires no downtime.

The upgrade procedure for an active-active cluster and an active-passive cluster are the same.

It is recommended that the passive secondary node be upgraded first, and then the active primary node.

Which three actions can be performed from within the war room? (Choose three)

View graphical representation of all records linked to an incident in the Artifacts lab

Investigate issues by tagging results as evidence.

Use the Task Manager tab to create, manage, assign, and track tasks.

View graphical representation of all records linked to an incident in the Artifacts lab

Change the room's status to Escalated to enforce hourly updates.

Investigate issues by tagging results as evidence.

Use the Task Manager tab to create, manage, assign, and track tasks.

Integrate a third-party instant messenger directly into the collaboration workspace.

Which two statements about appliance users are true? (Choose two.)

Appliance users do not have a login ID and do not add to the license count.

Appliance users represent non-human users.

Appliance users do not have a login ID and do not add to the license count.

Appliance users represent non-human users.

Appliance users use two-factor authentication for messages sent to the API.

Appliance users use time-expiring tokens for primary authentication.

Which two statements about Elasticsearch are true? (Choose two.)

Elasticsearch allows you to store, search, and analyze huge volumes of data quickly. In near real time, and return answers in milliseconds.

The global search mechanism in FortiSOAR leverages an Elasticsearch database to achieve rapid, efficient searches across the entire record system.

Elasticsearch allows you to store, search, and analyze huge volumes of data quickly. In near real time, and return answers in milliseconds.

To change the location of your Elasticsearch instance from the local instance to a remote location, you must update the falcon. conf file.

The minimum version of the Elasticsearch cluster must be 6.0.2. if you want to externalize the Elasticsearch data.

The global search mechanism in FortiSOAR leverages an Elasticsearch database to achieve rapid, efficient searches across the entire record system.

Refer to the exhibit. The former primary node was relegated to the secondary rote but is stuck in the Faulted state.Which two steps must you take to restore operation in the high availability (HA) cluster? (Choose two.)

On the node that is in the Faulted state, enter the csadm ha leave-cluster command.

Enter the csadm ha join-cluster command to have the node that is in the Faulted state rejoin the HA cluster as a secondary node.

Perform a fire drill to test the database integrity of the node that is in the Faulted state.

On the node that is in the Faulted state, enter the csadm ha leave-cluster command.

Enter the csadm ha join-cluster command to have the node that is in the Faulted state rejoin the HA cluster as a secondary node.

Restart the node that is in the Faulted state to trigger another election.

What are two features of the FortiSOAR perpetual trial license? (Choose two.).

It has restrictions on the number of users.

It has restrictions on the number of actions that can be performed.

It is a multi-tenant type license.

It provides access to FortiSOAR for a limited amount of time per day.

It has restrictions on the number of users.

It has restrictions on the number of actions that can be performed.

When configuring the system proxy on FortiSOAR. which two URLs should be accessible from the proxy server? (Choose two.)

https://iepo.fortisoar.fcrtinet.ccm

https://globalupdate.fortinet.net

https: //licensing, fortinet .net

https://iepo.fortisoar.fcrtinet.ccm

https://globalupdate.fortinet.net

View the exhibit:What does the command output mean?

The configuration to enable database externalization has not been completed.

The local PostgreSQL database is disabled on the FortiSOAR instance.

The local PostgreSQL database is configured on the FortiSOAR instance.

There is no connectivity between the PostgreSQL databases of the primary and secondary FortiSOAR instances.

Select two statements that are true about FortiSOAR themes.(Choose two.)

Non-administrator users can change the theme by editing their user profile.

FortiSOAR theme can be configured to apply to all users on the system.

There are three theme options available: Dark, Light, and Sky.

Non-administrator users can change the theme by editing their user profile.

FortiSOAR theme can be configured to apply to all users on the system.

Selecting Revert Theme allows the user to revert the user profile theme.

Refer to the exhibit. Which statement correctly describes the user's login behavior?

The user can log in only if there are enough seats available.

The user is sent to a waiting queue if there are named users logged in.

The user can log in only if there are enough seats available.

The user will always be able to draw from the concurrent pool and log in.

The user has an active concurrent session that does not time out.

An administrator wants to collect and review all FortiSOAR log tiles to troubleshoot an issue. Which two methods can they use to accomplish this? (Choose two.)

Download the logs from the GUI.

Enter the caacta log ---collect directory command.

Enter the csacta services ---status command, and then copy the output.

Download the logs from the GUI.

Enter the caacta log ---collect directory command.

Review the contents of /var/log/messages.

Which three activities can be achieved using the FortiSOAR queue and shift management feature? (Choose three)

Generate shift leads and shift members

Create queue rules based on matching conditions

Designate a coordinator to monitor queues and shifts

Generate shift leads and shift members

Create queue rules based on matching conditions

Fortinet NSE6_FSR-7.3 Practice Test 1 - Free Online Exam Prep & Questions

Question 1 / 39

Which two statements about FortiSOAR virtual instance deployment requirements are true? (Choose two.)

FortiSOAR Cloud is a subscription service that allows you to deploy an instance hosted on FortlCloud.

There are size limits for the records database, but no charges or fees for storing months or years worth of data.

FortiSOAR is supported on VMWare ESXi and Amazon Web Services (AWS).

While memory and storage can be added based on requirements, charges are required for every vCPU that is added to the FortiSOAR VM.

Comment (0)

Fortinet NSE6_FSR-7.3 Practice Test 1

Question

Fortinet NSE6_FSR-7.3 Practice Tests

Practice Tests