Analyze Basic JSON Query and YAQL Statements NSE6-FORTISOAR-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which situation in playbook development would require a YAQL query rather than a JSON query?

   • AAccessing a property of a nested object
   • BReading a top-level field from a JSON object
   • CRetrieving an element from an array by index
   • DFiltering a list of alerts to only those with a specific severity
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In a FortiSOAR playbook, which scenario is most appropriate for using a JSON query instead of a YAQL query?

   • AExtracting a single nested value from a known JSON structure
   • BAggregating values from multiple objects in a list
   • CFiltering a list of objects based on a dynamic condition
   • DTransforming a list of objects into a different shape
   Reveal Solution Discussion Select an answer first
4. 3foundation · medium

   Which JSON Query expression correctly extracts the value of the 'status' field from the first element of the 'alerts' array in the following JSON structure? {"alerts": [{"status": "open", "severity": "high"}, {"status": "closed", "severity": "low"}]}

   • Aalerts.status[0]
   • Balerts.status
   • Calerts[0].status
   • Dalerts[0].status[0]
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A playbook has a list of strings: ['apple', 'banana', 'cherry']. The analyst needs to create a new list where each string is UPPERCASED. Which YAQL expression accomplishes this?

   • A$.fruits.select($.toUpper())
   • B$.fruits.map($.toUpper())
   • C$.fruits.select($.upper())
   • D$.fruits.where($.toUpper())
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A playbook has a variable 'users' containing a list of objects with 'active' (boolean) and 'email' fields. The analyst needs to create a list of email addresses for ACTIVE users only. Which YAQL expression accomplishes this?

   • A$.users.where($.active = true).select($.email)
   • B$.users.select($.email).where($.active = true)
   • C$.users.where($.email).select($.active = true)
   • D$.users.select($.active = true, $.email)
   Reveal Solution Discussion Select an answer first