Fortinet NSE6_FSR-7.3 Practice Exams
Last updated on Oct 22,2026- Exam Code: NSE6_FSR-7.3
- Exam Name: Fortinet NSE 6 - FortiSOAR 7.3 Administrator
- Certification Provider: Fortinet
- Latest update: Oct 22,2026
Question #91
What command can be used to monitor real-time FortiSOAR process activities?
- A . ps aux
- B . grep FortiSOAR
- C . tail -f
- D . systemctl
Correct Answer: A
Question #92
When analyzing FortiSOAR log files, what information is crucial for identifying workflow execution problems? (Choose two)
- A . Timestamps
- B . User login attempts
- C . Execution IDs
- D . CPU usage at the time of execution
Correct Answer: AC
Question #93
What is an advanced consideration when managing incidents and alerts in a SOC/SOAR solution to enhance response strategies?
- A . The frequency of changing the alert tones
- B . The brand alignment of SOC hardware and software
- C . The selection of screen savers for the SOC
- D . The integration of incident data with predictive analytics
Correct Answer: D
Question #94
Which two statements about FortiSOAR virtual instance deployment requirements are true? (Choose two.)
- A . FortiSOAR Cloud is a subscription service that allows you to deploy an instance hosted on FortlCloud.
- B . There are size limits for the records database, but no charges or fees for storing months or years worth of data.
- C . FortiSOAR is supported on VMWare ESXi and Amazon Web Services (AWS).
- D . While memory and storage can be added based on requirements, charges are required for every vCPU that is added to the FortiSOAR VM.
Correct Answer: A, C
A, C
Explanation:
FortiSOAR offers flexibility in deployment environments, including FortiSOAR Cloud, which is a subscription service that enables hosting on FortiCloud. This provides cloud-hosted management with scalable resources. Additionally, FortiSOAR supports deployment on VMware ESXi and Amazon Web Services (AWS), allowing organizations to choose based on their infrastructure preferences. This flexibility ensures that FortiSOAR can be integrated into various IT environments depending on business needs.
A, C
Explanation:
FortiSOAR offers flexibility in deployment environments, including FortiSOAR Cloud, which is a subscription service that enables hosting on FortiCloud. This provides cloud-hosted management with scalable resources. Additionally, FortiSOAR supports deployment on VMware ESXi and Amazon Web Services (AWS), allowing organizations to choose based on their infrastructure preferences. This flexibility ensures that FortiSOAR can be integrated into various IT environments depending on business needs.
Question #95
On FortiSOAR. which default role is used to assign privileges to other teams and is recommended to not be removed?
- A . Application Administrator
- B . Full App Permissions
- C . Playbook Administrator
- D . Security Administrator
Correct Answer: A
A
Explanation:
In FortiSOAR, the "Application Administrator" role is a default role that holds broad privileges, including the ability to assign permissions to other teams. This role is fundamental to system administration and is recommended not to be removed as it provides crucial administrative capabilities. Removing or modifying this role could impact FortiSOAR’s ability to manage user roles and permissions effectively, which could hinder system operations and user management.
A
Explanation:
In FortiSOAR, the "Application Administrator" role is a default role that holds broad privileges, including the ability to assign permissions to other teams. This role is fundamental to system administration and is recommended not to be removed as it provides crucial administrative capabilities. Removing or modifying this role could impact FortiSOAR’s ability to manage user roles and permissions effectively, which could hinder system operations and user management.
Question #96
When managing audit logs, what type of activities can you filter by?
- A . Date and time only
- B . User actions and IP addresses
- C . File sizes
- D . Both Date and time only and User actions and IP addresses are correct
Correct Answer: D
Question #97
Which two ports must be open between FortiSOAR HA nodes’* (Choose two.)
- A . Port 5432
- B . Port 25
- C . Port 6380
- D . Port 9200
Correct Answer: A, D
A, D
Explanation:
In a FortiSOAR HA configuration, certain ports must be open for communication between nodes. Port 5432 is required for PostgreSQL database communication, which is essential for data replication between HA nodes. Port 9200 is used by Elasticsearch, which FortiSOAR leverages for indexing and search functions across the nodes. These ports must be accessible between nodes to ensure seamless operation and data consistency within the cluster.
A, D
Explanation:
In a FortiSOAR HA configuration, certain ports must be open for communication between nodes. Port 5432 is required for PostgreSQL database communication, which is essential for data replication between HA nodes. Port 9200 is used by Elasticsearch, which FortiSOAR leverages for indexing and search functions across the nodes. These ports must be accessible between nodes to ensure seamless operation and data consistency within the cluster.
Question #98
When configuring the system proxy on FortiSOAR. which two URLs should be accessible from the proxy server? (Choose two.)
- A . https://fortiguard.coin
- B . https: //licensing, fortinet .net
- C . https://iepo.fortisoar.fcrtinet.ccm
- D . https://globalupdate.fortinet.net
Correct Answer: C, D
C, D
Explanation:
When configuring the system proxy for FortiSOAR, it is essential to ensure connectivity to certain URLs to maintain system updates and licensing. For FortiSOAR, access to https://iepo.fortisoar.fortinet.com is required for incident enrichment and analysis, while https://globalupdate.fortinet.net is necessary for global updates to keep the system up-to-date with the latest threat information. These connections allow FortiSOAR to communicate with Fortinet’s servers to fetch updated threat intelligence and system updates, which are critical for the operational effectiveness of FortiSOAR.
C, D
Explanation:
When configuring the system proxy for FortiSOAR, it is essential to ensure connectivity to certain URLs to maintain system updates and licensing. For FortiSOAR, access to https://iepo.fortisoar.fortinet.com is required for incident enrichment and analysis, while https://globalupdate.fortinet.net is necessary for global updates to keep the system up-to-date with the latest threat information. These connections allow FortiSOAR to communicate with Fortinet’s servers to fetch updated threat intelligence and system updates, which are critical for the operational effectiveness of FortiSOAR.
Question #99
What is the purpose of audit logs in FortiSOAR?
- A . To track system errors and warnings only
- B . To monitor user activities and system changes
- C . To record network traffic
- D . To keep a log of emails sent by the system
Correct Answer: B
Question #100
For effective operation of a war room, what functionalities should be configured?
- A . Real-time communication tools
- B . A coffee maker in the corner
- C . Access controls and permissions
- D . Integration with incident response platforms
Correct Answer: ACD