ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 44 - NSE8_812 discussion

Report
Export

Refer to the exhibit showing a FortiSOAR playbook.

You are investigating a suspicious e-mail alert on FortiSOAR, and after reviewing the executed playbook, you can see that it requires intervention.

What should be your next step?

A.
Go to the Incident Response tasks dashboard and run the pending actions
Answers
A.
Go to the Incident Response tasks dashboard and run the pending actions
B.
Click on the notification icon on FortiSOAR GUI and run the pending input action
Answers
B.
Click on the notification icon on FortiSOAR GUI and run the pending input action
C.
Run the Mark Drive by Download playbook action
Answers
C.
Run the Mark Drive by Download playbook action
D.
Reply to the e-mail with the requested Playbook action
Answers
D.
Reply to the e-mail with the requested Playbook action
Suggested answer: B

Explanation:

To intervene in a suspicious e-mail alert on FortiSOAR, after reviewing the executed playbook, the next step is to click on the notification icon on FortiSOAR GUI and run the pending input action. The notification icon will show a badge with the number of pending input actions that require manual intervention from the user. The user can click on the notification icon and see a list of pending input actions, along with their details, such as playbook name, step name, record ID, and trigger time. The user can then click on the Run button to execute the pending input action and resume the playbook execution. Reference: https://docs.fortinet.com/document/fortisoar/7.0.0/administrationguide/ 103440/automation-stitches

https://docs.fortinet.com/document/fortisoar/7.0.0/administration-guide/103441/incomingwebhook

asked 18/09/2024
Olusola Adebayo
44 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first