Fortinet NSE6_FSR-7.3 Practice Exams
Last updated on Oct 22,2026- Exam Code: NSE6_FSR-7.3
- Exam Name: Fortinet NSE 6 - FortiSOAR 7.3 Administrator
- Certification Provider: Fortinet
- Latest update: Oct 22,2026
Where can you configure applications in FortiSOAR?
- A . In the System Configuration module
- B . Directly in the database
- C . Through external scripts
- D . Applications cannot be configured in FortiSOAR
For which two modules on FortiSOAR can you create SLA templates7 (Choose two.)
- A . Alerts
- B . Indicators
- C . Incidents
- D . Tasks
A, B
Explanation:
In FortiSOAR, SLA (Service Level Agreement) templates can be created for specific modules, including Alerts and Indicators. These templates are essential for tracking response and resolution times, ensuring compliance with defined service levels. By configuring SLAs on the Alerts and Indicators modules, organizations can monitor the time taken to address these items, which is critical in maintaining efficient incident response and management practices. The SLA templates can be customized according to specific business requirements and are applied to records within these modules to enforce timely actions.
In the context of monitoring FortiSOAR processes and services, which indicators would signal an issue requiring immediate attention? (Choose two)
- A . A slight increase in CPU usage during off-peak hours
- B . Error messages in the system logs
- C . An unexpected drop in the number of active incidents
- D . Consistent use of 90% or more disk capacity
Which steps are involved in migrating Elasticsearch data?
- A . Updating document mappings
- B . Changing the logo on the Kibana interface
- C . Snapshotting the existing data
- D . Restoring data to the new cluster
When externalizing Elasticsearch data, which aspects ensure data integrity and availability?
- A . Frequent data backups
- B . RAID configurations for storage
- C . Replication across multiple nodes
- D . A fast internet connection
What is a key feature of system fixtures in FortiSOAR?
- A . They are used for hardware diagnostics.
- B . They allow for the customization of dashboards.
- C . They enable the export and import of predefined configurations.
- D . They provide encryption for data at rest.
Which service on FortiSOAR is the playbook scheduler?
- A . cyops-torccat
- B . colcrybeatd
- C . celeryd
- D . uwsgi
B
Explanation:
In FortiSOAR, the service responsible for the playbook scheduling functionality is colcrybeatd. This service manages the timing and execution of scheduled playbooks, allowing for the automation of various tasks at specified intervals. It ensures that playbooks execute according to their configured schedules, which can include tasks such as data ingestion, threat detection, or incident response actions. Proper functioning of this service is essential for the reliable automation of time-dependent processes within FortiSOAR.
What is a key aspect of managing incidents and alerts effectively in a SOC/SOAR environment?
- A . Regularly updating the email signature used for incident notifications
- B . Ensuring timely and accurate categorization of incidents
- C . Assigning humorous names to identified threats
- D . Choosing alert sounds based on personal music preferences
Which initial setting is crucial to ensure effective SOC and SOAR operation?
- A . Configuring the alert notification tone
- B . Setting up proper integration with threat intelligence feeds
- C . Choosing a background theme for the interface
- D . Selecting a preferred language for system prompts
When deleting a user account on FortiSOAR, you must enter the user ID in which file on FortiSOAR?
- A . userDelete.txt.
- B . config_yml
- C . scripts
- D . usersToDelete.txt
D
Explanation:
When deleting a user account in FortiSOAR, the user ID must be entered into the usersToDelete.txt file. This file is specifically used to list users that are marked for deletion. Once the user IDs are listed in this file, the system can process the deletion of these accounts as part of its user management operations. This method ensures that only specified users are deleted, as referenced in FortiSOAR’s administrative controls.