Use War Rooms for Incident Handling NSE6-FORTISOAR-ANALYST Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An analyst is creating a war room for a new incident. The incident commander wants the war room to be easily identifiable and to include a brief description of the incident. What should the analyst configure?

   • ASet a descriptive name and add a description in the war room settings.
   • BUse the incident's name as the war room name and leave the description blank.
   • CCreate the war room without a name or description.
   • DSet the war room's name to 'War Room' and add no description.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In FortiSOAR, what is the recommended action for a war room after the associated incident has been resolved?

   • AClose or archive the war room to preserve the collaboration history
   • BLeave the war room open for future incidents
   • CConvert the war room into a new incident
   • DDelete the war room immediately to free up resources
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A junior analyst asks why a war room is being used for an incident instead of just using the incident's comments section. What is the primary advantage of a war room?

   • AIt creates a permanent record of all incident data.
   • BIt provides a dedicated, focused space for real-time collaboration and coordination.
   • CIt prevents unauthorized users from viewing the incident.
   • DIt automatically resolves the incident.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   In FortiSOAR, what is the purpose of assigning roles to war room participants?

   • ATo rank participants by their seniority in the organization
   • BTo determine the order in which participants speak during discussions
   • CTo automatically assign tasks to participants based on their role
   • DTo control what actions each participant can perform within the war room
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   In FortiSOAR, what is the primary purpose of a war room?

   • ATo provide a dedicated collaborative space for the incident response team to coordinate and communicate in real time
   • BTo serve as a repository for all playbooks and automation rules
   • CTo permanently store all incident-related evidence and logs
   • DTo automatically resolve incidents without human intervention
   Reveal Solution Discussion Select an answer first