Question 16
Review the following incident report.
Which two MITRE ATT&CK tactics are captured in this report? (Choose two.)
Which two MITRE ATT&CK tactics are captured in this report? (Choose two.)
Question 17
You are tasked with configuring automation to quarantine infected endpoints.
Which two Fortinet SOC components can work together to fulfill this task?
(Choose two.)
Which two Fortinet SOC components can work together to fulfill this task?
(Choose two.)
Question 18
What is the primary function of event handlers in a SOC operation?
Question 19
Which feature is most important when selecting a connector for integration into a SOC playbook?
Question 20
Refer to the exhibit.
Which two options describe how the Update Asset and Identity Database playbook is configured? (Choose two.)
Which two options describe how the Update Asset and Identity Database playbook is configured? (Choose two.)