Implement Playbook Logic NSE6-FORTISOAR-ANALYST Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary use of a for-each loop in a FortiSOAR playbook?

   • ATo wait for a specific time before continuing
   • BTo execute a step a fixed number of times
   • CTo iterate over a collection of items, such as a list of alerts
   • DTo branch the playbook based on a condition
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A playbook handles alerts with a 'severity' field that can be 'low', 'medium', 'high', or 'critical'. The team wants to assign a response priority: 'P1' for 'critical', 'P2' for 'high', 'P3' for 'medium', and 'P4' for 'low'. The playbook has an 'If' step. What is the correct order of conditions to ensure the correct priority is assigned?

   • ACheck for 'critical' first, then 'high', then 'medium', and use 'else' for 'low'.
   • BUse a step condition on a 'Set Variable' step for each severity level.
   • CCheck for 'critical' and 'high' in the same condition using 'or'.
   • DCheck for 'low' first, then 'medium', then 'high', and use 'else' for 'critical'.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When designing a playbook's overall flow, what is the primary purpose of an entry point?

   • ATo define the error handling for the playbook
   • BTo configure the logging level for the playbook
   • CTo specify the end of the playbook
   • DTo define the starting point of the playbook execution
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A playbook is triggered by a new alert record being created in FortiSOAR. The alert has a field 'source' that can be 'email', 'web', or 'api'. The playbook needs to parse the 'source' field and set a variable 'source_type' to 'phishing' if the source is 'email', 'web_attack' if 'web', and 'api_call' if 'api'. What is the most appropriate way to achieve this?

   • AUse a step condition on a 'Set Variable' step to check if 'source' equals 'email' and set the variable.
   • BUse a 'For Each' loop to iterate over all possible source values and set the variable.
   • CUse a preprocessing rule to map the 'source' field to the new 'source_type' variable.
   • DUse an 'If' step with three branches to set the 'source_type' variable based on the value of 'source'.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In FortiSOAR, where are step conditions typically configured?

   • AIn the step's configuration panel within the playbook editor
   • BIn the connector's configuration
   • CIn the trigger's settings
   • DIn the global playbook settings
   Reveal Solution Discussion Select an answer first