Configure Templates, Dashboards, and Widgets NSE6-FORTISOAR-ANALYST Practice Questions (Page 4)

Questions 16–19

1. 16application · medium

   A security team wants to create a new incident template for 'Ransomware' incidents. The template should include a mandatory field for 'Ransom Amount' and a default value of 'Critical' for the 'Severity' field. The team also wants to ensure that the 'Ransom Amount' field is only visible when the template is used. What should the team do?

   • AAdd the 'Ransom Amount' field to the global incident module and make it mandatory for all incidents.
   • BCreate a new template, add the 'Ransom Amount' field as mandatory, and set the 'Severity' field's default value to 'Critical'.
   • CCreate a playbook that adds the 'Ransom Amount' field to the incident form when the template is selected.
   • DUse a dashboard widget to collect the 'Ransom Amount' when creating a ransomware incident.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A SOC supervisor wants to create a dashboard that shows only incidents assigned to the 'Level 1' queue. The supervisor also wants to ensure that analysts with lower permissions cannot see incidents from other queues on this dashboard. What is the most effective way to achieve this?

   • ACreate a dashboard with a filter for the 'Level 1' queue and rely on the existing record-level permissions to restrict visibility.
   • BCreate a dashboard and configure the widget to use a custom SQL query that only selects 'Level 1' incidents.
   • CCreate a dashboard and share it only with the 'Level 1' analysts.
   • DCreate a new module view that filters incidents by queue and add it to the dashboard.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An analyst wants to add a widget to a dashboard that shows the status of all open cases in a visual pipeline format, moving from 'New' to 'In Progress' to 'Resolved'. Which widget type is best suited for this purpose?

   • AA chart widget configured as a funnel chart.
   • BA list widget with a custom view that groups cases by status.
   • CA kanban widget that displays cases in columns based on their status.
   • DA metric widget showing the count of cases in each status.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security analyst wants to add a widget to a dashboard that allows them to quickly search for an incident by its ID and then jump directly to that incident's detail view. Which widget type should the analyst use?

   • AA chart widget that plots incidents by ID.
   • BA list widget with a search bar and a link to the incident detail view.
   • CA text widget with a hyperlink to the incidents module.
   • DA metric widget that displays the total incident count and is clickable.
   Reveal Solution Discussion Select an answer first