Create Queues and Shifts for Workload Management NSE6-FORTISOAR-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A SOC manager is configuring FortiSOAR for a multi-tenant environment where each tenant has different SLAs and response requirements. The manager wants to ensure that incidents from a tenant with a premium SLA are prioritized over incidents from other tenants, and that they are routed to a dedicated team. What is the best approach?

   • ACreate a separate queue for the premium tenant and configure assignment rules to route incidents to a dedicated team, with higher priority.
   • BCreate a shift for the premium tenant's dedicated team and assign all premium incidents to that shift, regardless of time.
   • CCreate a queue for each tenant and configure assignment rules to route incidents to the appropriate team, but do not set priority.
   • DCreate a single queue for all tenants and rely on the SLA field to prioritize incidents manually.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an example of a shift definition?

   • AIncidents with a priority of P1
   • BNetwork security team
   • CMonday to Friday, 9:00 AM to 5:00 PM
   • DHigh severity incidents only
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A SOC manager is planning the shift schedule for the next quarter. The SOC has 10 analysts, but only 5 are needed per shift. The manager wants to ensure that each analyst works a reasonable number of hours and that there is always adequate coverage. The SOC operates 24/7. What should the manager consider when creating shifts in FortiSOAR?

   • ACreate shifts for each day of the week and assign the same 5 analysts to every shift, ensuring consistency.
   • BCreate shifts that cover the required coverage periods and assign analysts to shifts based on their availability and workload preferences.
   • CCreate shifts based on the number of incidents expected, but do not assign analysts until the day of the shift.
   • DCreate a single shift that covers all 24 hours and assign all 10 analysts to it, so that there is always coverage.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A SOC manager is setting up a new shift for the night team. The shift should cover Monday to Friday from 10 PM to 6 AM. The manager wants to ensure that incidents during this shift are handled by the night team. What should the manager do?

   • ACreate a shift named 'Night' with the specified hours and assign the night team to it.
   • BCreate a queue named 'Night' and assign the night team to it, but do not define specific hours.
   • CCreate a shift for Monday to Friday from 10 PM to 6 AM, but do not assign any analysts to it.
   • DCreate a shift that covers all days of the week and assign the night team to it.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A SOC manager is configuring FortiSOAR to handle incidents for a client with a strict SLA that requires a response within 15 minutes during business hours (9 AM to 5 PM, Monday to Friday). Outside business hours, the SLA is 4 hours. The SOC has analysts in two shifts: Day (9 AM to 5 PM) and Night (5 PM to 9 AM). The manager wants to ensure that incidents are routed to the appropriate shift and that the SLA is met. What is the most effective configuration?

   • ACreate a single queue for all incidents and configure assignment rules to route incidents to the Day shift during business hours and the Night shift outside business hours.
   • BCreate two queues: one for business hours and one for after-hours, and manually move incidents between them based on the time of arrival.
   • CCreate a shift for the Day and another for the Night, but do not integrate them with queues; instead, rely on analysts to check the queue periodically.
   • DCreate a single shift that covers all 24 hours and assign all analysts to it, ensuring that someone is always available.
   Reveal Solution Discussion Select an answer first