Create Queues and Shifts for Workload Management NSE6-FORTISOAR-ANALYST Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the main benefit of creating queues for incident tasks?

   • AIt reduces the need for incident documentation
   • BIt automatically resolves incidents without analyst intervention
   • CIt prevents all incidents from being created
   • DIt allows incidents to be organized and prioritized for efficient handling
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A financial services company has a SOC that handles incidents for different business units: retail banking, corporate banking, and wealth management. Each business unit has its own compliance requirements and response procedures. The SOC manager wants to ensure that incidents are automatically routed to the correct team based on the affected business unit. What should the manager configure in FortiSOAR?

   • ACreate a single queue for all incidents and have the SOC supervisor manually assign each incident to the appropriate team.
   • BCreate a single queue and use a custom field to tag incidents with the business unit, then rely on analysts to filter the queue.
   • CCreate separate queues for each business unit and configure assignment rules based on the business unit field in the incident.
   • DCreate shifts for each business unit and assign incidents to the shift that is currently active.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   How do queues and shifts work together in FortiSOAR?

   • AShifts automatically close incidents in queues
   • BShifts replace queues for incident organization
   • CQueues determine the severity of incidents
   • DQueues route incidents to analysts who are on active shifts
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the main benefit of integrating queues with shifts?

   • AIt automatically resolves incidents without human input
   • BIt ensures incidents are handled by available staff during active shifts
   • CIt eliminates the need for incident prioritization
   • DIt reduces the number of incidents created
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A healthcare organization's SOC handles incidents related to patient data breaches and system outages. The compliance team requires that all data breach incidents be handled by a specialized team, while system outages are handled by the infrastructure team. The SOC manager wants to automate the routing of incidents to the correct team. What should the manager do in FortiSOAR?

   • ACreate two queues: one for data breach incidents and one for system outages, and configure assignment rules based on the incident type.
   • BCreate a single queue for all incidents and have the compliance team manually review each incident to determine the appropriate team.
   • CCreate a single queue and use a custom field to tag incidents as 'breach' or 'outage', then rely on analysts to filter the queue.
   • DCreate shifts for the compliance team and the infrastructure team, and assign incidents to the shift that is currently active.
   Reveal Solution Discussion Select an answer first