Create Queues and Shifts for Workload Management NSE6-FORTISOAR-ANALYST Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following best describes queue assignment in FortiSOAR?

   • AA manual process that requires an administrator to edit each incident
   • BA process that permanently locks an incident to a queue
   • CA process that can be automated based on incident attributes
   • DA process that only works for incidents created by email
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Why is it important to assign personnel to shifts?

   • ATo automatically resolve all incidents
   • BTo eliminate the need for queues
   • CTo reduce the number of incidents created
   • DTo ensure adequate coverage and workload distribution
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A SOC uses FortiSOAR to manage incidents. The manager wants to ensure that incidents are assigned to analysts who are currently on duty, rather than to a pool of all analysts. The SOC operates with three shifts: morning, evening, and night. What should the manager configure?

   • ACreate three queues, one for each shift, and configure the incident assignment to use the queue that matches the current time.
   • BCreate a single shift that covers all 24 hours and assign all analysts to it.
   • CCreate three shifts, assign analysts to each shift, and integrate the shifts with the incident assignment so that only on-duty analysts receive incidents.
   • DCreate a single queue and use a custom script to check the current time and assign incidents manually.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A SOC manager is setting up shifts for a team that works in different time zones. The team has analysts in New York (EST) and London (GMT). The manager wants to ensure that there is overlap coverage during the hours when both teams are available, and that incidents are routed to the appropriate team based on the time of day. What should the manager do?

   • ACreate separate shifts for each time zone with the local working hours, and integrate them with queues to route incidents to the active shift.
   • BCreate a single shift that covers the combined working hours of both time zones and assign all analysts to it.
   • CCreate a queue for each time zone and assign incidents based on the source location of the incident.
   • DCreate shifts for each time zone but do not integrate them with queues; instead, rely on analysts to manually claim incidents.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the result of assigning multiple analysts to the same shift?

   • AIt increases the number of incidents in the queue
   • BIt prevents incidents from being assigned to other teams
   • CIt provides more coverage and distributes the workload among them
   • DIt automatically escalates all incidents
   Reveal Solution Discussion Select an answer first