Interact with FortiSOAR Using the API or Custom Triggers NSE6-FORTISOAR-ANALYST Practice Questions (Page 2)

Questions 6–10

1. 6application · easy

   A security engineer needs to create a new 'Case' record in FortiSOAR with specific fields such as title, description, and priority. The engineer is using the REST API. Which HTTP method and endpoint should be used?

   • APOST to /api/case
   • BDELETE to /api/case
   • CPUT to /api/case
   • DGET to /api/case
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When an external system calls a custom trigger URL in FortiSOAR, what happens?

   • AThe system automatically logs the user out
   • BThe associated workflow or action is executed
   • CThe FortiSOAR server restarts
   • DA new module is created
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security analyst is troubleshooting a script that uses the FortiSOAR REST API. The script successfully authenticates and can retrieve data, but when it tries to create a new incident, it receives a 403 Forbidden error. What is the most likely cause?

   • AThe request body is malformed.
   • BThe user account associated with the token lacks the 'Create' permission for the incident module.
   • CThe incident module does not exist.
   • DThe API token has expired.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A developer is building a custom integration that needs to create a new 'Indicator' record in FortiSOAR. The developer has the API endpoint /api/indicator and has successfully authenticated. What should be included in the request body?

   • AA JSON object containing the fields to be set for the new indicator, such as 'type' and 'value'.
   • BThe ID of the indicator to be created.
   • CThe authentication token in the body.
   • DOnly the 'type' field of the indicator.
   Reveal Solution Discussion Select an answer first
6. 10application · easy

   A developer is building a script to manage 'User' records in FortiSOAR. The script needs to perform all four CRUD operations. Which set of HTTP methods should the developer use?

   • AGET for create, POST for read, PUT for update, DELETE for delete.
   • BPUT for create, GET for read, POST for update, DELETE for delete.
   • CGET for read, POST for create, PUT for update, DELETE for delete.
   • DPOST for create, GET for read, DELETE for update, PUT for delete.
   Reveal Solution Discussion Select an answer first