Free FCSS_SOC_AN-7.4 Practice Questions and Answers | Updated 2025

• Question 1

  Which two types of variables can you use in playbook tasks? (Choose two.)

  • Input
  • Output
  • Create
  • Trigger

  Show Answer Answer: A,B Next

• Question 2

  Which statement best describes the MITRE ATT&CK framework?

  • It provides a high-level description of common adversary activities, but lacks technical details
  • It covers tactics, techniques, and procedures, but does not provide information about mitigations.
  • It describes attack vectors targeting network devices and servers, but not user endpoints.
  • It contains some techniques or subtechniques that fall under more than one tactic.

  Show Answer Answer: D Next

• Question 3

  Which role does a threat hunter play within a SOC?

  • Investigate and respond to a reported security incident
  • Collect evidence and determine the impact of a suspected attack
  • Search for hidden threats inside a network which may have eluded detection
  • Monitor network logs to identify anomalous behavior

  Show Answer Answer: C Next

• Question 4

  Refer to the exhibit,

  • There are four techniques that fall under tactic T1071.
  • There are four subtechniques that fall under technique T1071.
  • There are event handlers that cover tactic T1071.
  • There are 15 events associated with the tactic.

  Show Answer Answer: B,C Next

• Question 5

  A customer wants FortiAnalyzer to run an automation stitch that executes a CLI command on FortiGate to block a predefined list of URLs, if a botnet command-and-control (C&C) server IP is detected.Which FortiAnalyzer feature must you use to start this automation process?

  • Playbook
  • Data selector
  • Event handler
  • Connector

  Show Answer Answer: C Next