Debug and Troubleshoot Playbooks Using Executed Playbook Logs NSE6-FORTISOAR-ANALYST Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   An analyst is tracing the flow of a playbook run that unexpectedly skipped a step. Which part of the executed playbook log would best help the analyst understand why the step was skipped?

   • AThe 'Error' section of the skipped step, which contains the error message
   • BThe 'Status' field of the playbook run, which indicates the overall result
   • CThe 'Input' section of the skipped step, which shows the data passed to it
   • DThe 'Output' section of the previous step, which shows the result that may have influenced the condition
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   In FortiSOAR, where can an analyst access the logs of a specific executed playbook run to review its steps and outcome?

   • AFrom the 'Audit Logs' module, which records all user actions including playbook executions
   • BFrom the Playbook Editor, by opening the playbook and selecting the 'Logs' tab
   • CFrom the 'System Logs' page under Administration, which contains all application logs
   • DFrom the 'Executed Playbooks' section under the Playbooks module, filtering by the specific playbook and run
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   An analyst suspects that a FortiSOAR service has stopped, which may be preventing playbooks from executing. What is the first step to verify this suspicion?

   • AReview the executed playbook logs to see if any runs are recorded
   • BRestart the FortiSOAR services using 'systemctl restart fortisoar'
   • CCheck the network connectivity to the FortiSOAR server
   • DCheck the status of FortiSOAR services using 'systemctl status fortisoar'
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which FortiSOAR command-line utility is used to check the status of all FortiSOAR services?

   • Aservice fortisoar status
   • Bps aux | grep fortisoar
   • Csystemctl status fortisoar
   • Dfortisoar status
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A playbook that enriches indicators with threat intelligence data is taking much longer than usual and sometimes times out. The executed playbook log shows the first step completes quickly, but the second step (a connector call) hangs for several minutes before failing. Which service status should you check to diagnose the bottleneck?

   • AThe web server service to check for high CPU usage from UI requests.
   • BThe database service to see if it is experiencing lock contention.
   • CThe authentication service to verify the connector's API key is still valid.
   • DThe connector service or the integration service that handles outbound API requests.
   Reveal Solution Discussion Select an answer first