Configure Templates, Dashboards, and Widgets NSE6-FORTISOAR-ANALYST Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A security operations manager wants a single view that shows open incidents, average response time, and top threat indicators on one screen for daily monitoring. Which FortiSOAR feature should be used to bring these together?

   • AA template
   • BA dashboard
   • CA playbook
   • DA connector
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   An analyst wants to add a widget to a dashboard that shows the number of alerts received in the last 24 hours, broken down by the 'Source' field. The analyst wants the widget to be visually appealing and easy to read at a glance. Which widget type should the analyst use?

   • AA text widget with manually typed statistics.
   • BA pie chart widget configured to show the count of alerts by 'Source'.
   • CA metric widget showing the total number of alerts.
   • DA list widget showing all alerts with a 'Source' column.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A SOC manager wants a single dashboard view that shows the total number of open incidents, the average time to respond, and a list of the five most recent high-severity alerts. The manager needs to see all three pieces of information without navigating away from the dashboard. Which combination of widgets should the manager add to the dashboard?

   • AA text widget with manually typed statistics and a link to the alerts module.
   • BA single chart widget configured with three different data series.
   • CA metric widget for the incident count, a metric widget for average response time, and a list widget for recent high-severity alerts.
   • DA dashboard filter widget and a single table widget showing all incidents.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security team wants to standardize the creation of phishing alerts. They want the alert form to automatically populate the 'Source' field with 'Email', set the 'Confidence' field to 'High', and require the analyst to fill in the 'Sender Address' field before saving. Which FortiSOAR feature should be used to achieve this?

   • ACreate a dashboard widget that pre-fills the alert form when clicked.
   • BModify the global alert module schema to set default values for all alerts.
   • CConfigure an alert template with default values for 'Source' and 'Confidence' and mark 'Sender Address' as a mandatory field.
   • DUse a playbook that runs after the alert is saved to update the 'Source' and 'Confidence' fields.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of configuring a template in FortiSOAR?

   • ATo define a consistent set of fields and layout for new records
   • BTo create a visual chart of security metrics
   • CTo automate the execution of a playbook
   • DTo store historical data for long-term retention
   Reveal Solution Discussion Select an answer first