NSE7_OTS-6.4 practice

Q2 Multiple choice

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.

Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

Select all that apply.

A
You must set correct operator in event handler to trigger an event.
B
You can automate SOC tasks through playbooks.
C
Each playbook can include multiple triggers.
D
You cannot use Windows and Linux hosts security events with FortiSoC.