← Back to exam page

Free FCSS-SOC-AN-7-4 – Fortinet FCSS-SOC-AN-7-4 Practice Test Question

Loading demo links...

Showing 1–2 of 2 questions

Question 1 (Topic 1)

According to the National Institute of Standards and Technology (NIST) cybersecurity framework, incident handling activities can be divided into phases. In which incident handling phase do you quarantine a compromised host in order to prevent an adversary from using it as a stepping stone to the next phase of an attack?

Select an option, then click Submit answer.

  • ○ Containment
  • ○ Recovery
  • ○ Analysis
  • ○ Eradication
Question 2 (Topic 1)

Refer to the exhibits. The DOS attack playbook is configured to create an incident when an event handler generates a denial-of-service (DoS) attack event. Why did the DOS attack playbook fail to execute?

Select an option, then click Submit answer.

  • ○ The Attach_Data_To_Incident task is expecting an integer value but is receiving the incorrect data type.
  • ○ The Get Events task is configured to execute in the incorrect order.
  • ○ The Attach_Data_To_Incident task failed.
  • ○ The Create SMTP Enumeration incident task is expecting an integer value but is receiving the incorrect data type.