Download Fortinet FCSS_SOC_AN-7.4 Mock Test Study Material [Q22-Q40]

NO.22 What is the primary role of managing playbook templates in a SOC?

NO.23 Which two assets are available with the outbreak alert licensed feature on FortiAnalyzer?
(Choose two.)

NO.24 Which MITRE ATT&CK technique category involves collecting information about the environment and systems?

NO.25 Which feature is most important when selecting a connector for integration into a SOC playbook?

NO.26 How do effectively managed connectors impact the overall security posture of a SOC?

NO.27 In the context of SOC automation, how does effective management of connectors influence incident management?

NO.28 Refer to the exhibit,

which shows the partial output of the MITRE ATT&CK Enterprise matrix on FortiAnalyzer.
Which two statements are true? (Choose two.)

NO.29 Review the following incident report:
Attackers leveraged a phishing email campaign targeting your employees.
The email likely impersonated a trusted source, such as the IT department, and requested login credentials.
An unsuspecting employee clicked a malicious link in the email, leading to the download and execution of a Remote Access Trojan (RAT).
The RAT provided the attackers with remote access and a foothold in the compromised system.
Which two MITRE ATT&CK tactics does this incident report capture? (Choose two.)

NO.30 Which MITRE ATT&CK tactic involves an adversary trying to maintain their foothold within a network?

NO.31 What is the primary goal of a Security Operations Center (SOC) when analyzing security incidents?

NO.32 In configuring FortiAnalyzer collectors, what should be prioritized to manage large volumes of data efficiently?

NO.33 Which role does a threat hunter play within a SOC?

NO.34 In managing events and incidents, which factors should a SOC analyst focus on to improve response times?
(Choose Three)

NO.35 Which three end user logs does FortiAnalyzer use to identify possible IOC compromised hosts? (Choose three.)

NO.36 A customer wants FortiAnalyzer to run an automation stitch that executes a CLI command on FortiGate to block a predefined list of URLs, if a botnet command-and-control (C&C) server IP is detected.
Which FortiAnalyzer feature must you use to start this automation process?

NO.37 Which trigger type requires manual input to run a playbook?

NO.38 Refer to the exhibits.

The FortiMail Sender Blocklist playbook is configured to take manual input and add those entries to the FortiMail abc. com domain-level block list. The playbook is configured to use a FortiMail connector and the ADD_SENDER_TO_BLOCKLIST action.
Why is the FortiMail Sender Blocklist playbook execution failing7

NO.39 What should be prioritized when analyzing threat hunting information feeds?
(Choose Two)

NO.40 Which component of the Fortinet SOC solution is best suited for centralized log management?