Configure Templates, Dashboards, and Widgets NSE6-FORTISOAR-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A managed security service provider (MSSP) uses FortiSOAR to handle incidents for multiple customer tenants. Each customer has different severity naming conventions and required mandatory fields. The MSSP wants to ensure that when an analyst creates a new incident, the correct customer-specific fields and severity options are presented automatically. What should the MSSP configure?

   • ACreate a single incident template with all possible fields and use widget visibility rules to hide fields based on the logged-in user.
   • BUse a single template and rely on the analyst to manually add the customer-specific fields after creation.
   • CConfigure a dashboard filter that shows different incident fields based on the customer selected.
   • DCreate a separate incident template for each customer and assign the template to the corresponding customer's module permissions.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An analyst is creating a new incident using a template. The template has a mandatory field 'Asset' that is a reference to the 'Assets' module. The analyst notices that the 'Asset' field is not showing any records to select from, even though there are assets in the system. What is the most likely cause of this issue?

   • AThe 'Assets' module is not enabled in the current FortiSOAR instance.
   • BThe 'Asset' field is configured as a text field instead of a reference field.
   • CThe analyst does not have permission to view the 'Assets' module records.
   • DThe template is configured to hide the 'Asset' field.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization wants to ensure that all new incidents created by the 'Triage' team have a specific set of fields visible and a particular layout. They also want to prevent the 'Triage' team from seeing fields that are only relevant to the 'Response' team. What is the best way to achieve this in FortiSOAR?

   • ACreate a dashboard for each team that shows only the relevant fields.
   • BCreate two incident templates: one for the 'Triage' team and one for the 'Response' team, and assign them based on the user's role.
   • CUse a playbook to hide fields after the incident is created based on the creator's role.
   • DCreate a single template with all fields and use field-level permissions to hide the 'Response' fields from the 'Triage' team.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A SOC manager wants to create a dashboard that shows the number of incidents created per day for the last 30 days. The manager also wants to be able to click on a specific day's bar in the chart and see a list of the incidents created on that day. Which widget configuration would best achieve this?

   • AA list widget with a date filter that the analyst must manually adjust.
   • BA bar chart widget configured with a drill-down action that opens a list widget filtered by the selected date.
   • CA metric widget showing the total incidents and a separate list widget showing all incidents.
   • DA pie chart widget showing the distribution of incidents by status.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A SOC manager wants to create a dashboard that shows the number of incidents by severity for the current week. The manager also wants to compare this with the previous week. The dashboard should be easy to read and not require the analyst to manually change any filters. Which widget configuration would best achieve this?

   • AA metric widget showing the total incidents for the current week and a list widget for the previous week's incidents.
   • BA single bar chart showing the current week's data and a text widget with the previous week's totals.
   • CA grouped bar chart with two data series: one for the current week and one for the previous week.
   • DA pie chart showing the current week's distribution and a separate pie chart for the previous week.
   Reveal Solution Discussion Select an answer first