Create Queues and Shifts for Workload Management NSE6-FORTISOAR-ANALYST Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A SOC manager is setting up a new shift for the weekend. The shift should cover Saturday and Sunday from 8:00 AM to 8:00 PM. The manager wants to ensure that incidents arriving during this shift are handled by the weekend team. What should the manager configure in FortiSOAR?

   • ACreate a shift for Saturday and another for Sunday, but assign the weekend team to only one of them.
   • BCreate a shift that covers all days of the week and assign the weekend team to it.
   • CCreate a queue named 'Weekend' and assign the weekend team to it, but do not define specific hours.
   • DCreate a shift named 'Weekend' with the specified hours and assign the weekend team to it.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What does a shift define in FortiSOAR?

   • AThe escalation path for critical incidents
   • BThe type of incidents a team handles
   • CThe severity levels of incidents
   • DThe working hours and coverage period for a team
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A managed security service provider (MSSP) handles incidents for multiple clients. Each client has different severity levels and service-level agreements (SLAs). The SOC manager wants to ensure that high-severity incidents are immediately visible to the appropriate client-specific team, while lower-severity incidents are handled in a separate workflow. What should the manager configure in FortiSOAR to achieve this?

   • AUse a single queue and create a custom view for each client to filter incidents by severity.
   • BCreate shifts for each client team and assign incidents directly to the shift, bypassing queues.
   • CCreate a single queue for all incidents and rely on manual assignment by the SOC supervisor.
   • DCreate separate queues for each client and severity level, then configure assignment rules to route incidents to the appropriate queue.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A global company's SOC operates 24/7 across three regions: Americas, EMEA, and APAC. The SOC manager needs to ensure that each region has adequate analyst coverage during its local business hours, and that incidents are routed to analysts who are currently on duty. What should the manager configure in FortiSOAR?

   • ACreate a single shift covering all 24 hours and assign all analysts to it.
   • BCreate separate shifts for each region with appropriate working hours, assign analysts to their regional shift, and integrate these shifts with queues.
   • CCreate a queue for each region and assign all analysts to all queues.
   • DCreate shifts for each region but do not assign analysts; instead, rely on manual assignment by the shift lead.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A SOC has a team of analysts with varying skill levels. The manager wants to ensure that during the night shift, at least one senior analyst is on duty to handle complex incidents, while junior analysts handle routine incidents. How should the manager configure shifts in FortiSOAR?

   • ACreate a single queue for night incidents and assign all analysts to the queue, but do not create shifts.
   • BCreate a night shift for senior analysts only and do not assign junior analysts to any shift.
   • CCreate two night shifts: one for senior analysts and one for junior analysts, and assign personnel accordingly.
   • DCreate a single night shift and assign all analysts to it, regardless of skill level.
   Reveal Solution Discussion Select an answer first