Fortinet FCSS_SOC_AN-7.4 問題集

質問 1：
Refer to the exhibits.

The Malicious File Detect playbook is configured to create an incident when an event handler generates a malicious file detection event.
Why did the Malicious File Detect playbook execution fail?
A. The Attach_Data_To_lncident incident task wasexpecting an integer, but received an incorrect data format.
B. The Get Events task did not retrieve any event data.
C. The Attach Data To Incident task failed, which stopped the playbook execution.
D. The Create Incident task was expecting a name or number as input, but received an incorrect data format
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which FortiAnalyzer connector can you use to run automation stitches9
A. FortiMail
B. FortiCASB
C. FortiOS
D. Local
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
According to the National Institute of Standards and Technology (NIST) cybersecurity framework, incident handling activities can be divided into phases.
In which incident handling phase do you quarantine a compromised host in order to prevent an adversary from using it as a stepping stone to the next phase of an attack?
A. Recovery
B. Eradication
C. Analysis
D. Containment
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
What is the primary function of event handlers in a SOC operation?
A. To generate financial reports
B. To monitor the health of IT equipment
C. To automate responses to detected events
D. To provide technical support to end-users
正解：C

質問 5：
You are not able to view any incidents or events on FortiAnalyzer.
What is the cause of this issue?
A. FortiAnalyzer must be in a Fabric ADOM.
B. There are no open security incidents and events.
C. FortiAnalyzer is operating in collector mode.
D. FortiAnalyzer is operating as a Fabric supervisor.
正解：C

質問 6：
In monitoring SOC playbooks, what is a critical indicator of a need for updates or adjustments?
A. An increase in unresolved security alerts
B. The number of visitors to the SOC
C. A decrease in coffee consumption by SOC staff
D. The frequency of team-building activities
正解：A

質問 7：
Which two types of variables can you use in playbook tasks? (Choose two.)
A. Trigger
B. Output
C. input
D. Create
正解：B,C
解説: (Topexam メンバーにのみ表示されます)

質問 8：
In managing connectors within a SOC, what is a key benefit of ensuring proper integration?
A. It reduces the need for cybersecurity training
B. It ensures seamless data exchange and process automation
C. It enhances the aesthetic appeal of the SOC
D. It simplifies the legal compliance of the SOC
正解：B

質問 9：
Which two statements about the FortiAnalyzer Fabric topology are true? (Choose two.)
A. Logging devices must be registered to the supervisor.
B. The supervisor uses an API to store logs, incidents, and events locally.
C. Fabric members must be in analyzer mode.
D. Downstream collectors can forward logs to Fabric members.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)