20/4/2020 SOAR Quiz

 The Evolution of Cybersecurity

Started on Tuesday, April 21, 2020, 5:32 AM

State Finished
Completed on Tuesday, April 21, 2020, 5:38 AM
Time taken 5 mins 57 secs
Points 5/5
Grade 100 out of 100
Feedback Congratulations, you passed!

Question 1 Why is SOAR used?

Correct

1 points out of 1 Select one:

To synchronize tools, accelerate response times, reduce alert fatigue, and compensate for the skill shortage gap. 

To replace tier 1 analysts and automate all of their tasks.

To collaborate with other analysts during investigations.

To analyze workload, organize an analysts tasks, and allow teams to respond using their own processes.

Question 2 From the choices below, what is the best description of S.O.A.R?
Correct

1 points out of 1 Select one:

Connects all tools in your security stack together into defined workflows that can be run automatically. 

Correctly orients the security team to address the cyber threat according to the situation.

Combines the processes and the security tools available to exploit opportunities given a particular situation.

Question 3 What does the acronym SOAR stand for?

Correct

1 points out of 1 Select one:

Situation, Orientation, Adroit, & Replication

Security, Orchestration, Automation, & Response 

Single out, On the board, Asked, & Repeated

Situation, Opportunity, Action, & Result

Question 4 What is alert fatigue?

Correct

1 points out of 1 Select one:

When the number of alerts decline.

When an analyst is overwhelmed from the number of alerts coming in. 

When a team reduces the number of alerts coming in using SOAR.

When a SOAR solution is overloaded with alerts.

https://training.fortinet.com/mod/quiz/review.php?attempt=3092530&cmid=55419 1/2
20/4/2020 SOAR Quiz

Question 5 What are playbooks used for?

Correct

1 points out of 1 Select one:

To optimize manual processes.

The plan an analyst creates to complete a task manually.

To automate actions an analyst typically would have to complete manually. 

To describe the order analyst’s complete tasks.

https://training.fortinet.com/mod/quiz/review.php?attempt=3092530&cmid=55419 2/2