Fortinet NSE6-FSR-7-3 Exam Questions
Questions for the NSE6-FSR-7-3 were updated on : Nov 23 ,2025
Page 1 out of 3. Viewing questions 1-15 out of 39
Question 1
Select two statements that are true about FortiSOAR themes.
(Choose two.)
- A. There are three theme options available: Dark, Light, and Sky.
- B. Non-administrator users can change the theme by editing their user profile.
- C. FortiSOAR theme can be configured to apply to all users on the system.
- D. Selecting Revert Theme allows the user to revert the user profile theme.
Answer:
BC
Question 2
View the exhibit:
What does the command output mean?
- A. The configuration to enable database externalization has not been completed.
- B. The local PostgreSQL database is disabled on the FortiSOAR instance.
- C. The local PostgreSQL database is configured on the FortiSOAR instance.
- D. There is no connectivity between the PostgreSQL databases of the primary and secondary FortiSOAR instances.
Answer:
A
Question 3
Which two system monitoring reports are available on the System Monitoring widget?
(Choose two.)
- A. RAM Usage
- B. CPU Usage
- C. Service Status
- D. Playbook Health Status
Answer:
BC
Question 4
What are two use cases for configuring a FortiSOAR HA cluster?
(Choose two.)
- A. Disaster recovery
- B. Multi-tenancy
- C. Data externalization
- D. Scaling
Answer:
AD
Question 5
Which two relationship types are configurable on FortiSOAR?
(Choose two.)
- A. Siblings
- B. Grandparents
- C. Parents
- D. Relatives
Answer:
AC
Question 6
Which product is essential to level 3 of the SOC automation model?
- A. FortiAnalyzer
- B. FortiAuthenticator
- C. FortiManager
- D. FortiSOAR
Answer:
D
Question 7
What are two different services that you can configure for monitoring system and cluster health
statuses on FortiSOAR?
(Choose two.)
- A. Exchange
- B. POP
- C. IMAP
- D. SMTP
Answer:
AD
Question 8
Which three roles are defined as SAML roles?
(Choose three.)
- A. Service provider
- B. Role
- C. Identity provider
- D. Attribute map
- E. Principal
Answer:
ACE
Question 9
Refer to the exhibit.
View the exhibit. The dataset on FortiSOAR has been trained to predict which record field?
- A. Assigned To
- B. Status
- C. Playbooks
- D. Severity
Answer:
D
Question 10
Which edition of license, when deployed, will serve as a primary node in a distributed deployment?
- A. MT
- B. MT_Tenant
- C. MT_RegionalSOC
- D. Enterprise
Answer:
A
Question 11
What are two features of the FortiSOAR perpetual trial license? (Choose two.).
- A. It is a multi-tenant type license.
- B. It provides access to FortiSOAR for a limited amount of time per day.
- C. It has restrictions on the number of users.
- D. It has restrictions on the number of actions that can be performed.
Answer:
C, D
Explanation:
The FortiSOAR perpetual trial license includes limitations on both the number of users and the
number of actions that can be performed. These restrictions are in place to provide prospective users
with a functional evaluation of FortiSOAR while limiting its usage in a production environment. The
trial license does not support multi-tenancy and restricts the overall capacity for scaling, making it
suitable only for testing and familiarization with FortiSOAR’s capabilities.
Question 12
Refer to the exhibit.
How long after the syops-ha service goes down will the heartbeat missed notification be sent to the
administrator?
- A. 15 minutes
- B. 60 minutes
- C. 5 minutes
- D. 3 minutes
Answer:
B
Explanation:
In FortiSOAR's high availability (HA) setup, if the cyops-ha service becomes unresponsive, the system
is configured to send a "heartbeat missed" notification after a specified period, which in this case is
60 minutes. This delay allows for transient issues to be resolved without triggering immediate alerts,
while also ensuring that administrators are informed of prolonged service disruptions. Timely
notifications about the cyops-ha service's status help maintain the reliability and responsiveness of
the HA environment.
Question 13
On FortiSOAR. which default role is used to assign privileges to other teams and is recommended to
not be removed?
- A. Application Administrator
- B. Full App Permissions
- C. Playbook Administrator
- D. Security Administrator
Answer:
A
Explanation:
In FortiSOAR, the "Application Administrator" role is a default role that holds broad privileges,
including the ability to assign permissions to other teams. This role is fundamental to system
administration and is recommended not to be removed as it provides crucial administrative
capabilities. Removing or modifying this role could impact FortiSOAR's ability to manage user roles
and permissions effectively, which could hinder system operations and user management.
Question 14
Which playbook collection includes system-level playbooks that FortiSOAR uses to auto-populate
date fields when the status of incident or alert records changes to Resolved or Closed?
- A. SLA Management Playbooks
- B. Utilities Playbooks
- C. Schedule Management Playbooks
- D. Approval/Manual Task Playbooks
Answer:
A
Explanation:
The SLA Management Playbooks collection in FortiSOAR includes system-level playbooks designed to
auto-populate date fields when the status of incident or alert records changes to Resolved or Closed.
This functionality ensures that relevant date fields, such as resolution date or closure date, are
accurately filled based on SLA criteria. By using SLA Management Playbooks, FortiSOAR automatically
maintains date-related data integrity, which is essential for tracking and reporting purposes.
Question 15
Which log file contains license synchronization logs on FortiSOAR?
- A. fdn.log
- B. beat.log
- C. celery.log
- D. falcon.log
Answer:
A
Explanation:
The fdn.log file in FortiSOAR contains logs related to license synchronization activities. This log file
records events and errors associated with license checks and synchronization with Fortinet's licensing
servers, ensuring that the FortiSOAR instance remains compliant with licensing requirements.
Monitoring fdn.log can help administrators troubleshoot issues related to license synchronization
and ensure the system operates within the licensed limits.